Riskcovery

CVE-2024-49891

scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths

State
Published
Severity
Not scored
Published
Oct 21, 2024
Updated
May 11, 2026
Reserved
Oct 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths

When the HBA is undergoing a reset or is handling an errata event, NULL ptr dereference crashes may occur in routines such as lpfc_sli_flush_io_rings(), lpfc_dev_loss_tmo_callbk(), or lpfc_abort_handler().

Add NULL ptr checks before dereferencing hdwq pointers that may have been freed due to operations colliding with a reset or errata event handler.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 895427bd012ce5814fc9888c7c0ee9de44761833 to before 5873aa7f814754085d418848b2089ef406a02dd0Affected
  • 895427bd012ce5814fc9888c7c0ee9de44761833 to before 232a138bd843d48cb2368f604646d990db7640f3Affected
  • 895427bd012ce5814fc9888c7c0ee9de44761833 to before 99a801e2fca39a6f31e543fc3383058a8955896fAffected
  • 895427bd012ce5814fc9888c7c0ee9de44761833 to before fd665c8dbdb19548965b0ae80c490de00e906366Affected
  • 895427bd012ce5814fc9888c7c0ee9de44761833 to before 2be1d4f11944cd6283cb97268b3e17c4424945caAffected
LinuxLinux
  • 4.11Affected
  • before 4.11Not affected
  • 6.1.120 through 6.1.*Not affected
  • 6.6.64 through 6.6.*Not affected
  • 6.10.14 through 6.10.*Not affected
  • 6.11.3 through 6.11.*Not affected
  • 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.