Lucene search

K
redhatcveRedhat.comRH:CVE-2021-46963
HistoryFeb 29, 2024 - 7:02 a.m.

CVE-2021-46963

2024-02-2907:02:32
redhat.com
access.redhat.com
4
linux kernel
vulnerability
resolved
scsi
qla2xxx
crash

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.4%

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix crash in qla2xxx_mqueuecommand() RIP: 0010:kmem_cache_free+0xfa/0x1b0 Call Trace: qla2xxx_mqueuecommand+0x2b5/0x2c0 [qla2xxx] scsi_queue_rq+0x5e2/0xa40 __blk_mq_try_issue_directly+0x128/0x1d0 blk_mq_request_issue_directly+0x4e/0xb0 Fix incorrect call to free srb in qla2xxx_mqueuecommand(), as srb is now allocated by upper layers. This fixes smatch warning of srb unintended free.

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.4%