CVE-2021-46963

2024-02-2719:04:07

Debian Security Bug Tracker

security-tracker.debian.org

linux kernel

scsi vulnerability

qla2xxx

srb allocated

smatch warning

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.4%

JSON

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix crash in qla2xxx_mqueuecommand() RIP: 0010:kmem_cache_free+0xfa/0x1b0 Call Trace: qla2xxx_mqueuecommand+0x2b5/0x2c0 [qla2xxx] scsi_queue_rq+0x5e2/0xa40 __blk_mq_try_issue_directly+0x128/0x1d0 blk_mq_request_issue_directly+0x4e/0xb0 Fix incorrect call to free srb in qla2xxx_mqueuecommand(), as srb is now allocated by upper layers. This fixes smatch warning of srb unintended free.

OSVersionArchitecturePackageVersionFilename
Debian12alllinux< 5.10.38-1linux_5.10.38-1_all.deb
Debian11alllinux< 5.10.38-1linux_5.10.38-1_all.deb
Debian10alllinux< 4.19.194-1linux_4.19.194-1_all.deb
Debian999alllinux< 5.10.38-1linux_5.10.38-1_all.deb
Debian13alllinux< 5.10.38-1linux_5.10.38-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	linux	< 5.10.38-1	linux_5.10.38-1_all.deb
Debian	11	all	linux	< 5.10.38-1	linux_5.10.38-1_all.deb
Debian	10	all	linux	< 4.19.194-1	linux_4.19.194-1_all.deb
Debian	999	all	linux	< 5.10.38-1	linux_5.10.38-1_all.deb
Debian	13	all	linux	< 5.10.38-1	linux_5.10.38-1_all.deb