Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix use after free on unload A system crash is observed due to a stack trace warning related to the use after free operation. There are two signals that can cause dpcthread to terminate: the UNLOADING flag and...

CVE-2026-97537

A flaw was found in the Linux kernel's qla2xxx driver. A local user could cause a Denial of Service DoS through a system crash during device queue teardown. This issue occurs when error handling paths fail to properly synchronize queue state and attempt to deallocate memory pointers that were nev...

CVE-2026-97529

A flaw was found in the Linux kernel's qla2xxx driver. The driver fails to validate the length of vendor-specific request buffers before reading command data, resulting in an out-of-bounds read from heap memory. A local user with administrative privileges can exploit this flaw by submitting a...

CVE-2026-97528

A flaw was found in the Linux kernel's qla2xxx driver. This vulnerability allows an attacker on the storage network to cause a Denial of Service DoS or memory corruption. When an error occurs during the handling of Non-Volatile Memory Express NVMe Link Service responses, the driver releases an...

CVE-2026-97527

A flaw was found in the Linux kernel's qla2xxx driver. An attacker communicating over a Fibre Channel storage network can cause a Denial of Service DoS by triggering concurrent processing of unsolicited Non-Volatile Memory Express NVMe requests. Because the driver fails to properly synchronize li...

PT-2026-98470

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A CPU soft lockup can occur in the scsi qla2xxx driver due to an incorrect polling mechanism in the qla27xx copy multiple pkt and qla27xx copy fpin pkt functions. These functions poll th...

PT-2026-98469

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the scsi qla2xxx driver where the FC BSG transport allocates job-request using a user-supplied request len via memdup user. For FC BSG HST VENDOR, the fc bsg host...

PT-2026-98476

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the scsi qla2xxx driver during queue teardown. The response queue MSI-X handler qla2xxx msix rsp q schedules the qla do work function via queue workha-wq...

PT-2026-98475

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write exists in the scsi qla2xxx driver. The qla25xx ctrlvp iocb function calculates a map index using the vp index variable and writes to the vp idx map array without...

PT-2026-98467

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the scsi qla2xxx driver where the fcport-unsol ctx head list is modified from multiple contexts without a common lock. Entries are added via the qla2xxx process purls...

PT-2026-98468

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the scsi qla2xxx driver where the qla nvme xmt ls rsp function fails to remove uctx from the fcport-unsol ctx head list before freeing it with kfree during an LS rejec...

PT-2026-97909

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the scsi qla2xxx driver where the qla consume iocb function over-consumes the response queue. This occurs because qla24xx process response queue advances the ring ptr...

ROS-20260923-73-0060

The vulnerability of the qla2x00probeone function in the drivers/scsi/qla2xxx/qlaos.c driver for Linux SCSI devices is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

PT-2026-94633

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the scsi qla2xxx driver, the qla2x00 sysfs read vpd function performs a redundant call to ha-isp ops-read optrom. This second call occurs after the optrom mutex has been released, whi...

PT-2026-93500

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An information leak exists in the scsi qla2xxx driver. The function qla2x00 do dport diagnostics uses kmalloc obj to allocate a qla dport diag response buffer without zeroing it. Because...

PT-2026-93503

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak occurs in the qla2xxx driver within the SCSI subsystem. The function qla28xx validate flash image unconditionally returns QLA SUCCESS, signaling to the FC BSG transport...

PT-2026-93505

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the scsi qla2xxx driver where the qla2x00 write i2c and qla2x00 read i2c functions fail to perform bounds checks on the user-supplied length variable within the qla i2...

PT-2026-93497

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the scsi qla2xxx driver where MSI-X derived queue counts are not properly clamped, leading to integer truncation. Specifically, ha-msix count is a u16 type, while ha-m...

PT-2026-93502

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the scsi qla2xxx driver. In the format 1 path, the virtual port is located on ha-vp list while holding vport slock, but the lock is released before the...

PT-2026-93495

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the scsi qla2xxx driver. The function qla84xx put chip releases the reference to ha-cs84xx and frees it via qla84xx chip release without clearing the...