Riskcovery

CVE-2023-54108

scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests

State
Published
Severity
Not scored
Published
Dec 24, 2025
Updated
May 23, 2026
Reserved
Dec 24, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests

The following message and call trace was seen with debug kernels:

DMA-API: qla2xxx 0000:41:00.0: device driver failed to check map error [device address=0x00000002a3ff38d8] [size=1024 bytes] [mapped as single] WARNING: CPU: 0 PID: 2930 at kernel/dma/debug.c:1017 check_unmap+0xf42/0x1990

Call Trace: debug_dma_unmap_page+0xc9/0x100 qla_nvme_ls_unmap+0x141/0x210 [qla2xxx]

Remove DMA mapping from the driver altogether, as it is already done by FC layer. This prevents the warning.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 2d087c7e55db420107c3ea97b228e067a7b488a1 to before 3a564de3a299856f2cbd289649cea2e20d671a43Affected
  • 0910a791a6d7fd331f231f48200e18babb519769 to before e596253113b69b4018818260bd5da40c201bee73Affected
  • c9d6081a5f18286ad62afc1e9e06a90cfd626902 to before 77302fb0e357da666d5249a6e91078feeef3dadeAffected
  • c85ab7d9e27a80e48d5b7d7fb2fe2b0fdb2de523 to before 3ee4f1991c54c6707aa9df47e51c02ea25bb63e3Affected
  • c85ab7d9e27a80e48d5b7d7fb2fe2b0fdb2de523 to before ad6af23593594402c826eefdf43ae174e5f0f202Affected
  • c85ab7d9e27a80e48d5b7d7fb2fe2b0fdb2de523 to before c75e6aef5039830cce5d4cf764dd204522f89e6bAffected
  • 9765319079131d6a6019caec661825808c6405f1Affected
  • c05f4f6485726faae08073f947368ee10439d3f0Affected
  • 5.4.189 to before 5.4.235Affected
  • 5.10.110 to before 5.10.173Affected
  • 5.15.33 to before 5.15.99Affected
  • 5.16.19 to before 5.17Affected
  • 5.17.2 to before 5.18Affected
LinuxLinux
  • 5.18Affected
  • before 5.18Not affected
  • 5.4.235 through 5.4.*Not affected
  • 5.10.173 through 5.10.*Not affected
  • 5.15.99 through 5.15.*Not affected
  • 6.1.16 through 6.1.*Not affected
  • 6.2.3 through 6.2.*Not affected
  • 6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.