Skip to content
CVE PROGRAM SOURCE RECORD4.7 Medium

CVE-2024-50183

scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance Deleting an NPIV instance requires all fabric ndlps to be released before an NPIV's resources can be torn down. Failure to release fabric ndlps beforehand opens kref imbalance race conditions. Fix by forcing the DA_ID to complete synchronously with usage of wait_queue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 8ed190a91950564775cbaae9e8e8083a69a8da23 to < 0857b1c573c0b095aa778bb26d8b3378172471b6affected
  • 8ed190a91950564775cbaae9e8e8083a69a8da23 to < 0ef6e016eb53fad6dc44c3253945efb43a3486b9affected
  • 8ed190a91950564775cbaae9e8e8083a69a8da23 to < bbc525409bfe8e5bff12f5d18d550ab3e52cdbefaffected
  • 8ed190a91950564775cbaae9e8e8083a69a8da23 to < 0a3c84f71680684c1d41abb92db05f95c09111e8affected

Linux Linux

Default version status: affected

  • 5.17affected
  • 0 to < 5.17unaffected
  • 6.1.113 to ≤ 6.1.*unaffected
  • 6.6.57 to ≤ 6.6.*unaffected
  • 6.11.4 to ≤ 6.11.*unaffected
  • 6.12 to ≤ *unaffected

References