Description
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix FCE trace enable parsing in debugfs qla2x00_dfs_fce_write() called kstrtoul() with a NULL result pointer, so a successful parse would dereference NULL and oops. Worse, the int return value (0 on success, negative errno on failure) was assigned to the unsigned long enable flag, inverting the intended logic: a valid number was treated as "disable" while a parse failure enabled FCE. Parse the value into enable and propagate parse errors to userspace.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
3a5a789494875376d1f8063ec5ecc6beafda2ce1 to < b0c08c08a08b6cca0e7e192bcbe0514e41fcc55faffected73d3d3c66f108bc47922490f8500842530139975 to < 9932cbd0b49d0a5ab8378d32650ffb51604ffa35affected57c029cab0d908942e3ed9ff9fd0361144d01944 to < f5e245164d187d1ee227140c8b2e83b67f59c1fdaffected217230bc8796a922d5b15a9a94ec4414b2d2b3e3 to < 5762d992dddaf301e7fb78f797de407116847121affected2cf3c3fe9a11aa168e80c966494c58548b9aed5d to < eff41f50461c238bd2c5cd20672a5b53e68d493aaffected841df27d619ee1f5ca6473e15227b39d6136562d to < 7203d4aed8f444e7376c2dee8d93577b37cf9989affected841df27d619ee1f5ca6473e15227b39d6136562d to < aac0d3cb9199121d2ce5906e06f94b793fac1052affected841df27d619ee1f5ca6473e15227b39d6136562d to < b7368687e3d11f51392d3c4774ec0263d5fbf31faffecteda89872a61b914378591f16e428dd221c5e2059b2affected5.10.235 to < 5.10.270affected5.15.179 to < 5.15.221affected6.1.129 to < 6.1.188affected6.6.78 to < 6.6.157affected6.12.14 to < 6.12.110affected6.13.3 to < 6.14affected
Linux Linux
Default version status: affected
6.14affected0 to < 6.14unaffected5.10.270 to ≤ 5.10.*unaffected5.15.221 to ≤ 5.15.*unaffected6.1.188 to ≤ 6.1.*unaffected6.6.157 to ≤ 6.6.*unaffected6.12.110 to ≤ 6.12.*unaffected6.18.51 to ≤ 6.18.*unaffected7.2.5 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/b0c08c08a08b6cca0e7e192bcbe0514e41fcc55f ↗
- https://git.kernel.org/stable/c/9932cbd0b49d0a5ab8378d32650ffb51604ffa35 ↗
- https://git.kernel.org/stable/c/f5e245164d187d1ee227140c8b2e83b67f59c1fd ↗
- https://git.kernel.org/stable/c/5762d992dddaf301e7fb78f797de407116847121 ↗
- https://git.kernel.org/stable/c/eff41f50461c238bd2c5cd20672a5b53e68d493a ↗
- https://git.kernel.org/stable/c/7203d4aed8f444e7376c2dee8d93577b37cf9989 ↗
- https://git.kernel.org/stable/c/aac0d3cb9199121d2ce5906e06f94b793fac1052 ↗
- https://git.kernel.org/stable/c/b7368687e3d11f51392d3c4774ec0263d5fbf31f ↗