Description
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Serialize flash version read in reset handler The "update cache versions without reset" sysfs reset operation (0x20261) calls get_flash_version(), which reads hardware flash registers, without holding ha->optrom_mutex. The VPD update path serializes the same call under optrom_mutex, so this reset path can interleave its flash register accesses with a concurrent VPD or optrom flash operation and corrupt the reads. Hold ha->optrom_mutex across the get_flash_version() call to match the VPD update path.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
8c2cf7d4e387d003259488522523807f25576427 to < f1fc052f2a5890ea6dba80d50254dd6258b13386affected8c2cf7d4e387d003259488522523807f25576427 to < 31bf2714abbb0aa5a8a03d15038f8920e1c74b21affected8c2cf7d4e387d003259488522523807f25576427 to < ae979c549cba684e67b6c047140f3a8d2439b298affected8c2cf7d4e387d003259488522523807f25576427 to < 9cef42a073a0bdeee7fb1b47221cda222d330d2aaffected8c2cf7d4e387d003259488522523807f25576427 to < 75460967619eda720c9a03767729157ffd171d8caffected8c2cf7d4e387d003259488522523807f25576427 to < 8d116137119371349fb09685fe05413d8fc92efeaffected8c2cf7d4e387d003259488522523807f25576427 to < 33735490789e5417851752974c0b1d23125559cdaffected8c2cf7d4e387d003259488522523807f25576427 to < f606ed93de0c4f1e7e3618779e9fad731455314aaffected
Linux Linux
Default version status: affected
3.12affected0 to < 3.12unaffected5.10.270 to ≤ 5.10.*unaffected5.15.221 to ≤ 5.15.*unaffected6.1.188 to ≤ 6.1.*unaffected6.6.157 to ≤ 6.6.*unaffected6.12.110 to ≤ 6.12.*unaffected6.18.51 to ≤ 6.18.*unaffected7.2.5 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/f1fc052f2a5890ea6dba80d50254dd6258b13386 ↗
- https://git.kernel.org/stable/c/31bf2714abbb0aa5a8a03d15038f8920e1c74b21 ↗
- https://git.kernel.org/stable/c/ae979c549cba684e67b6c047140f3a8d2439b298 ↗
- https://git.kernel.org/stable/c/9cef42a073a0bdeee7fb1b47221cda222d330d2a ↗
- https://git.kernel.org/stable/c/75460967619eda720c9a03767729157ffd171d8c ↗
- https://git.kernel.org/stable/c/8d116137119371349fb09685fe05413d8fc92efe ↗
- https://git.kernel.org/stable/c/33735490789e5417851752974c0b1d23125559cd ↗
- https://git.kernel.org/stable/c/f606ed93de0c4f1e7e3618779e9fad731455314a ↗