In the Linux kernel, the following vulnerability has been resolved:
scsi: pm8001: Fix use-after-free in pm8001_queue_command()
Commit e29c47fe8946 ("scsi: pm8001: Simplify pm8001_task_exec()") refactors pm8001_queue_command(), however it introduces a potential cause of a double free scenario when it changes the function to return -ENODEV in case of phy down/device gone state.
In this path, pm8001_queue_command() updates task status and calls task_done to indicate to upper layer that the task has been handled. However, this also frees the underlying SAS task. A -ENODEV is then returned to the caller. When libsas sas_ata_qc_issue() receives this error value, it assumes the task wasn't handled/queued by LLDD and proceeds to clean up and free the task again, resulting in a double free.
Since pm8001_queue_command() handles the SAS task in this case, it should return 0 to the caller indicating that the task has been handled.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | May 3, 2026 | May 3, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Mar 25, 2026 |
| Ubuntu | — | Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-136-genericUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oem-20.04dUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-gcp-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-laptop-23.10Upgrade linux-image-kvmUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-awsUpgrade linux-image-raspi-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-aws-fips-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-6.8.0-136-fipsUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1063-azureUpgrade linux-image-azure-fde-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-aws-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-tegraUpgrade linux-image-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-intel-iotgUpgrade linux-image-ibmUpgrade linux-image-ibm-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-genericUpgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-xilinxUpgrade linux-image-virtual-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-raspiUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-generic-64kUpgrade linux-image-fips-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04aUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-azureUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-gcpUpgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1061-awsUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-azure-fipsUpgrade linux-image-oracle-64kUpgrade linux-image-realtimeUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-gcp-6.8 | Jul 21, 2026 | Jul 20, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Mar 25, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub