CVE-2024-49891

scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths

published October 21, 2024

CVSS
—
EPSS
0%
Percentile
13.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths

When the HBA is undergoing a reset or is handling an errata event, NULL ptr

dereference crashes may occur in routines such as

lpfc_sli_flush_io_rings(), lpfc_dev_loss_tmo_callbk(), or

lpfc_abort_handler().

Add NULL ptr checks before dereferencing hdwq pointers that may have been

freed due to operations colliding with a reset or errata event handler.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00236 · 13.7th percentile
Published
2024-10-21T18:01Z
EPSS history
Timeline
  • 21 OCT 18:01Z
    scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
    cvelistv5