Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: A memory leak was fixed in the error path of qla2x00processels. The commit number is 8c0eb596baa5 “SCSI qla2xxx: Fix a memory leak in an error path of qla2x00processels”. The intended changes were to modify the...

PT-2026-93487

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the qla2x00 status entry function. The issue occurs when the FWI2 status path advances sense data and reduces par sense len by the value of rsp info len...

PT-2026-93488

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the qla2xxx SCSI driver. The function qla2x00 async iocb timeout attempts to abort a timed-out asynchronous Input Output Control Block IOCB. When qla24xx...

PT-2026-93500

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An information leak exists in the scsi qla2xxx driver. The function qla2x00 do dport diagnostics uses kmalloc obj to allocate a qla dport diag response buffer without zeroing it. Because...

PT-2026-93486

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL dereference occurs in the qla2x00 error entry function due to a double-read of ha-req q mapque. The function reads the map slot once for a NULL check and a second time when...

PT-2026-93492

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the qla2x00 dfs fce write function within the scsi qla2xxx driver. The function calls kstrtoul using a NULL result pointer, which leads to a NULL pointer dereference a...

PT-2026-93490

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the qla2xxx driver where the qla2x00 status entry function fails to properly validate SCSI Request Blocks SRB before they enter the SCSI fast path. The function filter...

PT-2026-93499

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the qla2x00 update fru versions function where a user-supplied BSG request is copied into a fixed 256-byte stack buffer. The function iterates based on the count...

ROS-20260702-73-0030

The vulnerability of the qla2x00terminaterportio function in the drivers/scsi/qla2xxx/qlaattr.c file of the Linux SCSI device driver module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...

qla2x00_eh_wait_forPendingCommands Buffer Overflow

The vulnerability of the qla2x00ehwaitforPendingCommands function in the drivers/scsi/qla2xxx/qlaos.c driver for SCSI devices in the Linux operating system is related to a buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Linux SCSI driver Heap Buffer Overflow DoS

The vulnerability of the qla2x00terminaterportio function in the drivers/scsi/qla2xxx/qlaattr.c file of the Linux SCSI device driver module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005036)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005036 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix a memory leak in an error path of qla2x00processels Commit 8c0eb596baa5 SCSI...

Azure Linux 3.0 Security Update: kernel (CVE-2024-26930)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26930 advisory. - In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix double free of the...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002988)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002988 advisory. An integer overflow in the qla2x00sysfswriteoptromctl function in drivers/scsi/qla2xxx/qlaattr.c in the Linux kernel through 4.12.10 allows local users to cause a...

CVE-2025-68745

CVE-2025-68745 affects the Linux kernel SCSI QLA2xxx path (scsi: qla2xxx). The issue arises from how commands are handled after a chip reset, due to a sequence of commits affecting offline port/host reset handling and DMA unmapping, which could cause commands to remain active. The advisory indica...

Linux Distros Unpatched Vulnerability : CVE-2023-53696

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: qla2xxx: Fix memory leak in qla2x00probeone There is a memory leak reported by kmemleak: unreferenced object 0xffffc900003f0000 size 12288: comm modprobe,...

DEBIAN-CVE-2023-53696

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix memory leak in qla2x00probeone There is a memory leak reported by kmemleak: unreferenced object 0xffffc900003f0000 size 12288: comm "modprobe", pid 19117, jiffies 4299751452 age 42490.264s hex dump first 32...

UBUNTU-CVE-2023-53696

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix memory leak in qla2x00probeone There is a memory leak reported by kmemleak: unreferenced object 0xffffc900003f0000 size 12288: comm "modprobe", pid 19117, jiffies 4299751452 age 42490.264s hex dump first 32...

CVE-2023-53696 scsi: qla2xxx: Fix memory leak in qla2x00_probe_one()

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix memory leak in qla2x00probeone There is a memory leak reported by kmemleak: unreferenced object 0xffffc900003f0000 size 12288: comm "modprobe", pid 19117, jiffies 4299751452 age 42490.264s hex dump first 32...

SUSE CVE-2021-47473

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix a memory leak in an error path of qla2x00processels Commit 8c0eb596baa5 "SCSI qla2xxx: Fix a memory leak in an error path of qla2x00processels", intended to change: bsgjob-request-msgcode == FCBSGHSTELSNOLOGIN...