CVE-2022-50098

CVE-2022-50098

High · published June 18, 2025

CVSS v3.1
8.8
EPSS
0%
Percentile
22.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts

Ensure SRB is returned during I/O timeout error escalation. If that is not

possible fail the escalation path.

Following crash stack was seen:

BUG: unable to handle kernel paging request at 0000002f56aa90f8

IP: qla_chk_edif_rx_sa_delete_pending+0x14/0x30 [qla2xxx]

Call Trace:

? qla2x00_status_entry+0x19f/0x1c50 [qla2xxx]

? qla2x00_start_sp+0x116/0x1170 [qla2xxx]

? dma_pool_alloc+0x1d6/0x210

? mempool_alloc+0x54/0x130

? qla24xx_process_response_queue+0x548/0x12b0 [qla2xxx]

? qla_do_work+0x2d/0x40 [qla2xxx]

? process_one_work+0x14c/0x390

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00311 · 22.8th percentile
Published
2025-06-18T15:15Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel≥ 4.10, < 5.15.615.15.61
linux/linux_kernel≥ 5.16, < 5.18.185.18.18
linux/linux_kernel≥ 5.19, < 5.19.25.19.2
References (4)
https://git.kernel.org/stable/c/7dcd49c42b14717dd668fd73b503d241fdf82439 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/b70553175d0f94ebd73670bc16ade90bd7f7d76f · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/b7bae3886a30d258b5b4fee26647043d68da3661 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/c39587bc0abaf16593f7abcdf8aeec3c038c7d52 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 18 JUN 11:02Z
    scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
    cvelistv5