Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2023-53615

scsi: qla2xxx: Fix deletion race condition

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix deletion race condition System crash when using debug kernel due to link list corruption. The cause of the link list corruption is due to session deletion was allowed to queue up twice. Here's the internal trace that show the same port was allowed to double queue for deletion on different cpu. 20808683956 015 qla2xxx [0000:13:00.1]-e801:4: Scheduling sess ffff93ebf9306800 for deletion 50:06:0e:80:12:48:ff:50 fc4_type 1 20808683957 027 qla2xxx [0000:13:00.1]-e801:4: Scheduling sess ffff93ebf9306800 for deletion 50:06:0e:80:12:48:ff:50 fc4_type 1 Move the clearing/setting of deleted flag lock.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 726b85487067d7f5b23495bc33c484b8517c4074 to < a4628a5b98e4c6d905e1f7638242612d7db7d9c2affected
  • 726b85487067d7f5b23495bc33c484b8517c4074 to < 4d7da12483e98c451a51bd294a3d3494f0aee5ebaffected
  • 726b85487067d7f5b23495bc33c484b8517c4074 to < f1ea164be545629bf442c22f508ad9e7b94ac100affected
  • 726b85487067d7f5b23495bc33c484b8517c4074 to < cd06c45b326e44f0d21dc1b3fa23e71f46847e28affected
  • 726b85487067d7f5b23495bc33c484b8517c4074 to < b05017cb4ff75eea783583f3d400059507510ab1affected
  • 726b85487067d7f5b23495bc33c484b8517c4074 to < 6dfe4344c168c6ca20fe7640649aacfcefcccb26affected

Linux Linux

Default version status: affected

  • 4.11affected
  • 0 to < 4.11unaffected
  • 5.4.258 to ≤ 5.4.*unaffected
  • 5.10.195 to ≤ 5.10.*unaffected
  • 5.15.132 to ≤ 5.15.*unaffected
  • 6.1.54 to ≤ 6.1.*unaffected
  • 6.5.4 to ≤ 6.5.*unaffected
  • 6.6 to ≤ *unaffected

References