Riskcovery

CVE-2024-42288

scsi: qla2xxx: Fix for possible memory corruption

State
Published
Severity
7.8 High
Published
Aug 17, 2024
Updated
Aug 5, 2026
Reserved
Jul 30, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Fix for possible memory corruption

Init Control Block is dereferenced incorrectly. Correctly dereference ICB

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 0645cb8350cdb60bfbf91caa722984b81c215add to before dae67169cb35a37ecccf60cfcd6bf93a1f4f5efbAffected
  • 0645cb8350cdb60bfbf91caa722984b81c215add to before 87db8d7b7520e99de71791260989f06f9c94953dAffected
  • 0645cb8350cdb60bfbf91caa722984b81c215add to before b0302ffc74123b6a99d7d1896fcd9b2e4072d9ceAffected
  • 0645cb8350cdb60bfbf91caa722984b81c215add to before 2a15b59a2c5afac89696e44acf5bbfc0599c6c5eAffected
  • 0645cb8350cdb60bfbf91caa722984b81c215add to before 571d7f2a08836698c2fb0d792236424575b9829bAffected
  • 0645cb8350cdb60bfbf91caa722984b81c215add to before 8192c533e89d9fb69b2490398939236b78cda79bAffected
  • 0645cb8350cdb60bfbf91caa722984b81c215add to before c03d740152f78e86945a75b2ad541bf972fab92aAffected
LinuxLinux
  • 4.20Affected
  • before 4.20Not affected
  • 5.4.282 through 5.4.*Not affected
  • 5.10.224 through 5.10.*Not affected
  • 5.15.165 through 5.15.*Not affected
  • 6.1.103 through 6.1.*Not affected
  • 6.6.44 through 6.6.*Not affected
  • 6.10.3 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.