In the Linux kernel, the following vulnerability has been resolved: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" This reverts commit 0367076b0817d5c75dfb83001ce7c…
High CVSS 8.8
Summary
In the Linux kernel, the following vulnerability has been resolved: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" This reverts commit 0367076b0817d5c75dfb83001ce7ce5c64d803a9. The commit being reverted added code to __qla2x00_abort_all_cmds() to call sp->done() without holding a spinlock. But unlike the older code below it, this new code failed to check sp->cmd_type and just assumed TYPE_SRB, which results in a jump to an invalid pointer in target-mode with…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/1c728951bc769b795d377852eae1abddad88635d
- https://git.kernel.org/stable/c/50b097d92c99f718831b8b349722bc79f718ba1b
- https://git.kernel.org/stable/c/b04b3733fff7e94566386b962e4795550fbdfd3d
- https://git.kernel.org/stable/c/b10ebbfd59a535c8d22f4ede6e8389622ce98dc0
- https://git.kernel.org/stable/c/b57fbc88715b6d18f379463f48a15b560b087ffe
- https://git.kernel.org/stable/c/c5c37a821bd1708f26a9522b4a6f47b9f7a20003
- https://git.kernel.org/stable/c/e9e601b7df58ba0c667baf30263331df2c02ffe1
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
Timeline
- nvd_ingest NVD