In the Linux kernel, the following vulnerability has been resolved:
scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
The MBX_TIMEOUT return code is not handled in lpfc_get_sfp_info and the routine unconditionally frees submitted mailbox commands regardless of return status. The issue is that for MBX_TIMEOUT cases, when firmware returns SFP information at a later time, that same mailbox memory region references previously freed memory in its cmpl routine.
Fix by adding checks for the MBX_TIMEOUT return code. During mailbox resource cleanup, check the mbox flag to make sure that the wait did not timeout. If the MBOX_WAKE flag is not set, then do not free the resources because it will be freed when firmware completes the mailbox at a later time in its cmpl routine.
Also, increase the timeout from 30 to 60 seconds to accommodate boot scripts requiring longer timeouts.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution existsUpgrade linux | May 15, 2025 | Sep 27, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Apr 15, 2025 | Sep 27, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 27, 2024 |
| Suse | — | Upgrade dtb-caviumUpgrade kernel-debug-develUpgrade kernel-kvmsmall-develUpgrade dtb-lgUpgrade kernel-default-baseUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-debugUpgrade kernel-default-develUpgrade dtb-apmUpgrade dtb-amdUpgrade dtb-freescaleUpgrade reiserfs-kmp-rtUpgrade dtb-alteraUpgrade kernel-64kbUpgrade dtb-appleUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade dtb-amazonUpgrade kernel-devel-rtUpgrade dtb-mediatekUpgrade dtb-renesasUpgrade kernel-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-docs-htmlUpgrade kernel-default-optionalUpgrade kernel-64kb-extraUpgrade kernel-azure-extraUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade dtb-socionextUpgrade kernel-azure-optionalUpgrade dtb-xilinxUpgrade dtb-broadcomUpgrade kernel-obs-qaUpgrade dtb-marvellUpgrade kernel-default-livepatch-develUpgrade kernel-rt-livepatchUpgrade kernel-source-azureUpgrade kernel-default-extraUpgrade kernel-symsUpgrade dtb-allwinnerUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-defaultUpgrade dtb-hisiliconUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-rt-develUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmallUpgrade kernel-rtUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade dtb-amlogicUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-defaultUpgrade dlm-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-livepatch-develUpgrade dtb-exynosUpgrade kernel-macrosUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-azureUpgrade kernel-rt-extraUpgrade kernel-sourceUpgrade kselftests-kmp-azureUpgrade dtb-armUpgrade reiserfs-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-docsUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-develUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade kernel-default-base-rebuildUpgrade kernel-devel-azureUpgrade kernel-syms-rtUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade dtb-nvidiaUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-azureUpgrade dlm-kmp-64kbUpgrade kernel-obs-build | Dec 5, 2025 | Nov 13, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-gkeUpgrade linux-image-gkeopUpgrade linux-image-oracle-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-ibmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-azureUpgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-ibm-classicUpgrade linux-image-kvmUpgrade linux-image-virtualUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-nvidia-64k-hwe-22.04 | Dec 13, 2024 | Sep 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub