In the Linux kernel, the following vulnerability has been resolved:
scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
The MBX_TIMEOUT return code is not handled in lpfc_get_sfp_info and the routine unconditionally frees submitted mailbox commands regardless of return status. The issue is that for MBX_TIMEOUT cases, when firmware returns SFP information at a later time, that same mailbox memory region references previously freed memory in its cmpl routine.
Fix by adding checks for the MBX_TIMEOUT return code. During mailbox resource cleanup, check the mbox flag to make sure that the wait did not timeout. If the MBOX_WAKE flag is not set, then do not free the resources because it will be freed when firmware completes the mailbox at a later time in its cmpl routine.
Also, increase the timeout from 30 to 60 seconds to accommodate boot scripts requiring longer timeouts.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Sep 27, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Apr 15, 2025 | Sep 27, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 27, 2024 |
| Suse | — | Upgrade kernel-rt-extraUpgrade dtb-sprdUpgrade kernel-default-base-rebuildUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-kvmsmallUpgrade kernel-syms-azureUpgrade dtb-armUpgrade kernel-sourceUpgrade kernel-rt-optionalUpgrade kernel-default-vdsoUpgrade dlm-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-azure-livepatch-develUpgrade kernel-docsUpgrade kernel-rt-vdsoUpgrade kernel-source-vanillaUpgrade kernel-azure-vdsoUpgrade kernel-macrosUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade kernel-defaultUpgrade dlm-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-source-rtUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-develUpgrade dtb-nvidiaUpgrade kernel-rt_debug-vdsoUpgrade dtb-qcomUpgrade kernel-azureUpgrade dtb-rockchipUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-default-livepatchUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-default-baseUpgrade dtb-lgUpgrade cluster-md-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-devel-rtUpgrade kernel-azure-optionalUpgrade dtb-socionextUpgrade kernel-obs-qaUpgrade dtb-amdUpgrade kernel-default-develUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-64kb-extraUpgrade dtb-mediatekUpgrade kernel-rt_debugUpgrade dtb-apmUpgrade dtb-amazonUpgrade kernel-64kb-optionalUpgrade dtb-xilinxUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-develUpgrade dtb-caviumUpgrade dtb-appleUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-azureUpgrade kernel-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-develUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-livepatchUpgrade kernel-default-livepatch-develUpgrade kernel-default-extraUpgrade kernel-azure-extraUpgrade dtb-renesasUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-default-optional | Dec 5, 2025 | Nov 13, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-22.04dUpgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-oracle-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1002-gkeop | Dec 13, 2024 | Sep 27, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub