DEBIAN-CVE-2022-49701

In the Linux kernel, the following vulnerability has been resolved: scsi: ibmvfc: Allocate/free queue resource only during probe/remove Currently, the sub-queues and event pool resources are allocated/freed for every CRQ connection event such as reset and LPM. This exposes the driver to a couple...

CVE-2022-49701

CVE-2022-49701 affects the Linux kernel ibmvfc SCSI driver. The issue arises because sub-queues and event pool resources were allocated/freed for every CRQ connection event (e.g., reset, LPM) instead of only during probe/remove, creating a race window and potential list corruption when queues are...