In the Linux kernel, the following vulnerability has been resolved:
scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
The MBX_TIMEOUT return code is not handled in lpfc_get_sfp_info and the routine unconditionally frees submitted mailbox commands regardless of return status. The issue is that for MBX_TIMEOUT cases, when firmware returns SFP information at a later time, that same mailbox memory region references previously freed memory in its cmpl routine.
Fix by adding checks for the MBX_TIMEOUT return code. During mailbox resource cleanup, check the mbox flag to make sure that the wait did not timeout. If the MBOX_WAKE flag is not set, then do not free the resources because it will be freed when firmware completes the mailbox at a later time in its cmpl routine.
Also, increase the timeout from 30 to 60 seconds to accommodate boot scripts requiring longer timeouts.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution existsUpgrade linux | May 15, 2025 | Sep 27, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Apr 15, 2025 | Sep 27, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 27, 2024 |
| Suse | — | Upgrade kernel-obs-buildUpgrade dlm-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade dtb-exynosUpgrade kernel-azure-livepatch-develUpgrade dtb-sprdUpgrade kernel-rt-livepatch-develUpgrade dtb-rockchipUpgrade dtb-armUpgrade kernel-source-vanillaUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-vdsoUpgrade dtb-amlogicUpgrade kernel-debug-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmallUpgrade kernel-rt-optionalUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-rtUpgrade kernel-rt-extraUpgrade kernel-azureUpgrade kernel-macrosUpgrade kernel-docsUpgrade reiserfs-kmp-64kbUpgrade kernel-sourceUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-develUpgrade kernel-rt_debug-develUpgrade dtb-qcomUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-defaultUpgrade dtb-nvidiaUpgrade kselftests-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-defaultUpgrade dlm-kmp-rtUpgrade kernel-default-develUpgrade dtb-freescaleUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-develUpgrade dtb-amdUpgrade reiserfs-kmp-rtUpgrade kernel-debugUpgrade kernel-64kbUpgrade dtb-alteraUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-default-baseUpgrade dtb-lgUpgrade dtb-renesasUpgrade dtb-apmUpgrade dtb-amazonUpgrade dtb-appleUpgrade kernel-kvmsmall-develUpgrade kernel-debug-develUpgrade dtb-caviumUpgrade kernel-symsUpgrade dtb-mediatekUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-broadcomUpgrade kernel-source-azureUpgrade kernel-default-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-default-extraUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-rt_debugUpgrade kernel-develUpgrade kernel-64kb-extraUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade dtb-xilinxUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-devel-rtUpgrade kernel-azure-optionalUpgrade dtb-socionextUpgrade kernel-obs-qaUpgrade kernel-default-livepatchUpgrade gfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-devel | Dec 5, 2025 | Nov 13, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-kvmUpgrade linux-image-ibm-classicUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-azureUpgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-gkeopUpgrade linux-image-nvidiaUpgrade linux-image-ibmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64k | Dec 13, 2024 | Sep 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub