CVE-2024-50183

scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance

Medium · published November 8, 2024

CVSS v3.1
4.7
EPSS
0%
Percentile
5.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance

Deleting an NPIV instance requires all fabric ndlps to be released before

an NPIV's resources can be torn down. Failure to release fabric ndlps

beforehand opens kref imbalance race conditions. Fix by forcing the DA_ID

to complete synchronously with usage of wait_queue.

The record
Technical detail
CVSS v3.1
4.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00162 · 5.0th percentile
Published
2024-11-08T05:38Z
EPSS history
Timeline
  • 08 NOV 05:38Z
    scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance
    cvelistv5