In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Complete command early within lock
A crash was observed while performing NPIV and FW reset,
BUG: kernel NULL pointer dereference, address: 000000000000001c #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 0 P4D 0 Oops: 0000 1 PREEMPT_RT SMP NOPTI RIP: 0010:dma_direct_unmap_sg+0x51/0x1e0 RSP: 0018:ffffc90026f47b88 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000021 RCX: 0000000000000002 RDX: 0000000000000021 RSI: 0000000000000000 RDI: ffff8881041130d0 RBP: ffff8881041130d0 R08: 0000000000000000 R09: 0000000000000034 R10: ffffc90026f47c48 R11: 0000000000000031 R12: 0000000000000000 R13: 0000000000000000 R14: ffff8881565e4a20 R15: 0000000000000000 FS: 00007f4c69ed3d00(0000) GS:ffff889faac80000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000000001c CR3: 0000000288a50002 CR4: 00000000007706e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 PKRU: 55555554 Call Trace: <TASK> ? __die_body+0x1a/0x60 ? page_fault_oops+0x16f/0x4a0 ? do_user_addr_fault+0x174/0x7f0 ? exc_page_fault+0x69/0x1a0 ? asm_exc_page_fault+0x22/0x30 ? dma_direct_unmap_sg+0x51/0x1e0 ? preempt_count_sub+0x96/0xe0 qla2xxx_qpair_sp_free_dma+0x29f/0x3b0 [qla2xxx] qla2xxx_qpair_sp_compl+0x60/0x80 [qla2xxx] __qla2x00_abort_all_cmds+0xa2/0x450 [qla2xxx]
The command completion was done early while aborting the commands in driver unload path but outside lock to avoid the WARN_ON condition of performing dma_free_attr within the lock. However this caused race condition while command completion via multiple paths causing system crash.
Hence complete the command early in unload path but within the lock to avoid race condition.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.224-212.876Upgrade bpftool-debuginfoUpgrade kernelUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perf | Mar 27, 2025 | Aug 17, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 2, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools | Dec 12, 2024 | Aug 17, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Aug 17, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 17, 2024 |
| Suse | — | Upgrade kernel-64kbUpgrade dtb-exynosUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade dtb-caviumUpgrade cluster-md-kmp-rtUpgrade dtb-marvellUpgrade gfs2-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-kvmsmallUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-develUpgrade dtb-xilinxUpgrade kernel-rtUpgrade kernel-default-optionalUpgrade kernel-default-livepatchUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade dlm-kmp-64kbUpgrade dtb-lgUpgrade ocfs2-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-rt-optionalUpgrade kernel-syms-azureUpgrade gfs2-kmp-azureUpgrade dtb-broadcomUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-azureUpgrade dtb-amazonUpgrade kselftests-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-rt_debug-develUpgrade kernel-source-rtUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-baseUpgrade kernel-debug-vdsoUpgrade kernel-develUpgrade dtb-alteraUpgrade kernel-source-vanillaUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade dtb-hisiliconUpgrade kernel-default-develUpgrade dtb-qcomUpgrade kernel-default-vdsoUpgrade dtb-appleUpgrade kernel-rt-livepatchUpgrade kernel-debugUpgrade kernel-azureUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-azure-optionalUpgrade dtb-socionextUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-azure-vdsoUpgrade kernel-debug-develUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-vdsoUpgrade dtb-amdUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-syms-rtUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-default-manUpgrade dtb-renesasUpgrade dtb-nvidiaUpgrade dtb-mediatekUpgrade dtb-apmUpgrade kernel-macrosUpgrade kernel-rt-extraUpgrade kernel-docsUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-default-baseUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-defaultUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade kernel-default-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-symsUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade kernel-debug-livepatch-develUpgrade dtb-armUpgrade dtb-amlogicUpgrade dlm-kmp-defaultUpgrade kernel-default-extra | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-5.15.0-1075-azureUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gke-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-osp1Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-5.4.0-1102-gkeopUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04aUpgrade linux-image-5.4.0-1119-raspiUpgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.4.0-200-genericUpgrade linux-image-awsUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1072-awsUpgrade linux-image-oem-24.04aUpgrade linux-image-kvmUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1139-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-5.4.0-1140-azureUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.4.0-200-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-nvidiaUpgrade linux-image-5.4.0-1123-kvmUpgrade linux-image-5.4.0-1094-bluefieldUpgrade linux-image-5.4.0-1139-gcpUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-gkeopUpgrade linux-image-genericUpgrade linux-image-oemUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1078-azureUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1134-oracleUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-5.4.0-1054-xilinx-zynqmpUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-125-genericUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-5.4.0-1082-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-nvidia-6.8Upgrade linux-image-intelUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-5.4.0-1044-iotUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-bluefieldUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-5.4.0-200-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1135-awsUpgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-ibmUpgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatency | Nov 4, 2024 | Aug 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub