Description
In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Fix device resources accessed after device removal Correct possible race conditions during device removal. Previously, a scheduled work item to reset a LUN could still execute after the device was removed, leading to use-after-free and other resource access issues. This race condition occurs because the abort handler may schedule a LUN reset concurrently with device removal via sdev_destroy(), leading to use-after-free and improper access to freed resources. - Check in the device reset handler if the device is still present in the controller's SCSI device list before running; if not, the reset is skipped. - Cancel any pending TMF work that has not started in sdev_destroy(). - Ensure device freeing in sdev_destroy() is done while holding the LUN reset mutex to avoid races with ongoing resets.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
2d80f4054f7f901b8ad97358a9069616ac8524c7 to < 7dfa5a5516ec3c6b9b6c22ee18f0eb2df3f38ef2affected2d80f4054f7f901b8ad97358a9069616ac8524c7 to < 6d2390653d82cad0e1ba2676e536dd99678f6ef1affected2d80f4054f7f901b8ad97358a9069616ac8524c7 to < eccc02ba1747501d92bb2049e3ce378ba372f641affected2d80f4054f7f901b8ad97358a9069616ac8524c7 to < 4e1acf1b6dd6dd0495bda139daafd7a403ae2dc1affected2d80f4054f7f901b8ad97358a9069616ac8524c7 to < 1a5c5a2f88e839af5320216a02ffb075b668596aaffected2d80f4054f7f901b8ad97358a9069616ac8524c7 to < b518e86d1a70a88f6592a7c396cf1b93493d1aabaffected
Linux Linux
Default version status: affected
6.0affected0 to < 6.0unaffected6.1.160 to ≤ 6.1.*unaffected6.6.120 to ≤ 6.6.*unaffected6.12.63 to ≤ 6.12.*unaffected6.17.13 to ≤ 6.17.*unaffected6.18.2 to ≤ 6.18.*unaffected6.19 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/7dfa5a5516ec3c6b9b6c22ee18f0eb2df3f38ef2 ↗
- https://git.kernel.org/stable/c/6d2390653d82cad0e1ba2676e536dd99678f6ef1 ↗
- https://git.kernel.org/stable/c/eccc02ba1747501d92bb2049e3ce378ba372f641 ↗
- https://git.kernel.org/stable/c/4e1acf1b6dd6dd0495bda139daafd7a403ae2dc1 ↗
- https://git.kernel.org/stable/c/1a5c5a2f88e839af5320216a02ffb075b668596a ↗
- https://git.kernel.org/stable/c/b518e86d1a70a88f6592a7c396cf1b93493d1aab ↗
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-457936.html ↗