CVE-2024-42289

scsi: qla2xxx: During vport delete send async logout explicitly

State: Published
Severity: Not scored
Published: Aug 17, 2024
Updated: May 23, 2026
Reserved: Jul 30, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: During vport delete send async logout explicitly

During vport delete, it is observed that during unload we hit a crash because of stale entries in outstanding command array. For all these stale I/O entries, eh_abort was issued and aborted (fast_fail_io = 2009h) but I/Os could not complete while vport delete is in process of deleting.

BUG: kernel NULL pointer dereference, address: 000000000000001c #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 0 P4D 0 Oops: 0000 [#1] PREEMPT SMP NOPTI Workqueue: qla2xxx_wq qla_do_work [qla2xxx] RIP: 0010:dma_direct_unmap_sg+0x51/0x1e0 RSP: 0018:ffffa1e1e150fc68 EFLAGS: 00010046 RAX: 0000000000000000 RBX: 0000000000000021 RCX: 0000000000000001 RDX: 0000000000000021 RSI: 0000000000000000 RDI: ffff8ce208a7a0d0 RBP: ffff8ce208a7a0d0 R08: 0000000000000000 R09: ffff8ce378aac9c8 R10: ffff8ce378aac8a0 R11: ffffa1e1e150f9d8 R12: 0000000000000000 R13: 0000000000000000 R14: ffff8ce378aac9c8 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8d217f000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000000001c CR3: 0000002089acc000 CR4: 0000000000350ee0 Call Trace: <TASK> qla2xxx_qpair_sp_free_dma+0x417/0x4e0 ? qla2xxx_qpair_sp_compl+0x10d/0x1a0 ? qla2x00_status_entry+0x768/0x2830 ? newidle_balance+0x2f0/0x430 ? dequeue_entity+0x100/0x3c0 ? qla24xx_process_response_queue+0x6a1/0x19e0 ? __schedule+0x2d5/0x1140 ? qla_do_work+0x47/0x60 ? process_one_work+0x267/0x440 ? process_one_work+0x440/0x440 ? worker_thread+0x2d/0x3d0 ? process_one_work+0x440/0x440 ? kthread+0x156/0x180 ? set_kthread_struct+0x50/0x50 ? ret_from_fork+0x22/0x30 </TASK>

Send out async logout explicitly for all the ports during vport delete.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	efa93f48fa9d423fda166bc3b6c0cbb09682492e to before 086489256696eb774654a5410e86381c346356feAffected efa93f48fa9d423fda166bc3b6c0cbb09682492e to before 171ac4b495f9473bc134356a00095b47e6409e52Affected efa93f48fa9d423fda166bc3b6c0cbb09682492e to before e5ed6a26ffdec0c91cf0b6138afbd675c00ad5fcAffected efa93f48fa9d423fda166bc3b6c0cbb09682492e to before b12c54e51ba83c1fbc619d35083d7872e42ecdefAffected efa93f48fa9d423fda166bc3b6c0cbb09682492e to before d28a2075bb530489715a3b011e1dd8765ba20313Affected efa93f48fa9d423fda166bc3b6c0cbb09682492e to before 87c25fcb95aafabb6a4914239f4ab41b07a4f9b7Affected efa93f48fa9d423fda166bc3b6c0cbb09682492e to before b35d6d5a2f38605cddea7d5c64cded894fbe8edeAffected efa93f48fa9d423fda166bc3b6c0cbb09682492e to before 76f480d7c717368f29a3870f7d64471ce0ff8fb2Affected 01cda405c88b5ce1ff8c7d4006ec23ade2b0a507Affected 030680c5b21d4ec33234d17503827800e4550345Affected 4.14.62 to before 4.15Affected 4.17.14 to before 4.18Affected
LinuxLinux	4.18Affected before 4.18Not affected 4.19.320 through 4.19.Not affected 5.4.282 through 5.4.Not affected 5.10.224 through 5.10.Not affected 5.15.165 through 5.15.Not affected 6.1.103 through 6.1.Not affected 6.6.44 through 6.6.Not affected 6.10.3 through 6.10.*Not affected 6.11 and laterNot affected

Product

Versions

LinuxLinux

efa93f48fa9d423fda166bc3b6c0cbb09682492e to before 086489256696eb774654a5410e86381c346356feAffected
efa93f48fa9d423fda166bc3b6c0cbb09682492e to before 171ac4b495f9473bc134356a00095b47e6409e52Affected
efa93f48fa9d423fda166bc3b6c0cbb09682492e to before e5ed6a26ffdec0c91cf0b6138afbd675c00ad5fcAffected
efa93f48fa9d423fda166bc3b6c0cbb09682492e to before b12c54e51ba83c1fbc619d35083d7872e42ecdefAffected
efa93f48fa9d423fda166bc3b6c0cbb09682492e to before d28a2075bb530489715a3b011e1dd8765ba20313Affected
efa93f48fa9d423fda166bc3b6c0cbb09682492e to before 87c25fcb95aafabb6a4914239f4ab41b07a4f9b7Affected
efa93f48fa9d423fda166bc3b6c0cbb09682492e to before b35d6d5a2f38605cddea7d5c64cded894fbe8edeAffected
efa93f48fa9d423fda166bc3b6c0cbb09682492e to before 76f480d7c717368f29a3870f7d64471ce0ff8fb2Affected
01cda405c88b5ce1ff8c7d4006ec23ade2b0a507Affected
030680c5b21d4ec33234d17503827800e4550345Affected
4.14.62 to before 4.15Affected
4.17.14 to before 4.18Affected

LinuxLinux

4.18Affected
before 4.18Not affected
4.19.320 through 4.19.*Not affected
5.4.282 through 5.4.*Not affected
5.10.224 through 5.10.*Not affected
5.15.165 through 5.15.*Not affected
6.1.103 through 6.1.*Not affected
6.6.44 through 6.6.*Not affected
6.10.3 through 6.10.*Not affected
6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.