In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Validate sp before freeing associated memory
System crash with the following signature [154563.214890] nvme nvme2: NVME-FC{1}: controller connect complete [154564.169363] qla2xxx [0000:b0:00.1]-3002:2: nvme: Sched: Set ZIO exchange threshold to 3. [154564.169405] qla2xxx [0000:b0:00.1]-ffffff:2: SET ZIO Activity exchange threshold to 5. [154565.539974] qla2xxx [0000:b0:00.1]-5013:2: RSCN database changed – 0078 0080 0000. [154565.545744] qla2xxx [0000:b0:00.1]-5013:2: RSCN database changed – 0078 00a0 0000. [154565.545857] qla2xxx [0000:b0:00.1]-11a2:2: FEC=enabled (data rate). [154565.552760] qla2xxx [0000:b0:00.1]-11a2:2: FEC=enabled (data rate). [154565.553079] BUG: kernel NULL pointer dereference, address: 00000000000000f8 [154565.553080] #PF: supervisor read access in kernel mode [154565.553082] #PF: error_code(0x0000) - not-present page [154565.553084] PGD 80000010488ab067 P4D 80000010488ab067 PUD 104978a067 PMD 0 [154565.553089] Oops: 0000 1 PREEMPT SMP PTI [154565.553092] CPU: 10 PID: 858 Comm: qla2xxx_2_dpc Kdump: loaded Tainted: G OE ------- --- 5.14.0-503.11.1.el9_5.x86_64 #1 [154565.553096] Hardware name: HPE Synergy 660 Gen10/Synergy 660 Gen10 Compute Module, BIOS I43 09/30/2024 [154565.553097] RIP: 0010:qla_fab_async_scan.part.0+0x40b/0x870 [qla2xxx] [154565.553141] Code: 00 00 e8 58 a3 ec d4 49 89 e9 ba 12 20 00 00 4c 89 e6 49 c7 c0 00 ee a8 c0 48 c7 c1 66 c0 a9 c0 bf 00 80 00 10 e8 15 69 00 00 <4c> 8b 8d f8 00 00 00 4d 85 c9 74 35 49 8b 84 24 00 19 00 00 48 8b [154565.553143] RSP: 0018:ffffb4dbc8aebdd0 EFLAGS: 00010286 [154565.553145] RAX: 0000000000000000 RBX: ffff8ec2cf0908d0 RCX: 0000000000000002 [154565.553147] RDX: 0000000000000000 RSI: ffffffffc0a9c896 RDI: ffffb4dbc8aebd47 [154565.553148] RBP: 0000000000000000 R08: ffffb4dbc8aebd45 R09: 0000000000ffff0a [154565.553150] R10: 0000000000000000 R11: 000000000000000f R12: ffff8ec2cf0908d0 [154565.553151] R13: ffff8ec2cf090900 R14: 0000000000000102 R15: ffff8ec2cf084000 [154565.553152] FS: 0000000000000000(0000) GS:ffff8ed27f800000(0000) knlGS:0000000000000000 [154565.553154] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [154565.553155] CR2: 00000000000000f8 CR3: 000000113ae0a005 CR4: 00000000007706f0 [154565.553157] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [154565.553158] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [154565.553159] PKRU: 55555554 [154565.553160] Call Trace: [154565.553162] <TASK> [154565.553165] ? show_trace_log_lvl+0x1c4/0x2df [154565.553172] ? show_trace_log_lvl+0x1c4/0x2df [154565.553177] ? qla_fab_async_scan.part.0+0x40b/0x870 [qla2xxx] [154565.553215] ? __die_body.cold+0x8/0xd [154565.553218] ? page_fault_oops+0x134/0x170 [154565.553223] ? snprintf+0x49/0x70 [154565.553229] ? exc_page_fault+0x62/0x150 [154565.553238] ? asm_exc_page_fault+0x22/0x30
Check for sp being non NULL before freeing any associated memory
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.251-248.983Upgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-headersUpgrade python-perf-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-tools-develUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernelUpgrade kernel-modules-extra-commonUpgrade kernel-livepatch-6.1.164-196.303Upgrade python3-perfUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-libbpf-debuginfoUpgrade perf-debuginfo | Mar 27, 2026 | Feb 18, 2026 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Mar 16, 2026 | Mar 16, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Mar 25, 2026 | Feb 18, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Feb 18, 2026 |
| Ubuntu | — | Upgrade linux-image-raspi-6.8Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1058-nvidia-64kUpgrade linux-image-6.8.0-1060-ibmUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oem-20.04cUpgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-lowlatency-5.15Upgrade linux-image-6.8.0-134-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azure-fde-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-ibm-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-oracle-6.8Upgrade linux-image-gke-64kUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-nvidia-6.8Upgrade linux-image-azure-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-5.15.0-186-fipsUpgrade linux-image-realtime-6.8.1Upgrade linux-image-aws-fipsUpgrade linux-image-generic-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1060-aws-64kUpgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-6.8.0-134-genericUpgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-6.8.0-1057-oracleUpgrade linux-image-6.8.0-1058-gke-64kUpgrade linux-image-aws-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-azureUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-6.8.1-1055-realtimeUpgrade linux-image-gcp-5.15Upgrade linux-image-oem-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-gcp-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1057-oracle-64kUpgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-6.8.0-1058-nvidia-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1029-nvidia-tegra-rtUpgrade linux-image-awsUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-nvidia-5.15Upgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-gke-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-azure-fips-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-laptop-23.10Upgrade linux-image-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1063-gcpUpgrade linux-image-realtime-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1112-awsUpgrade linux-image-aws-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-gcp-6.8Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1058-nvidiaUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1063-gcp-fipsUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-gcpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-ibmUpgrade linux-image-gkeopUpgrade linux-image-aws-64kUpgrade linux-image-oracle-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-xilinxUpgrade linux-image-6.8.0-1060-raspiUpgrade linux-image-6.8.0-2049-raspi-realtimeUpgrade linux-image-6.8.0-1058-gkeUpgrade linux-image-5.15.0-1117-azureUpgrade linux-image-6.8.0-1029-nvidia-tegraUpgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-realtimeUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-134-fipsUpgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-6.8.0-1058-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-oracleUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-fde-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-136-genericUpgrade linux-image-6.8.0-1062-azure-fipsUpgrade linux-image-6.8.0-1060-awsUpgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-ibm-6.8Upgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-6.8.0-1045-gkeopUpgrade linux-image-azure-6.8Upgrade linux-image-5.15.0-186-genericUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1063-gcp-64kUpgrade linux-image-kvmUpgrade linux-image-raspi-realtimeUpgrade linux-image-generic-6.8Upgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-virtualUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1060-aws-fipsUpgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-134-lowlatency-64kUpgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-kvm-5.15Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-intelUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-genericUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-134-generic-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-gke | Jul 2, 2026 | Jul 1, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Feb 18, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub