WS-2021-0216

Linux/kernel in versions v5.5-rc1 to v5.12 is vulnerable to crash in qla2xxxmqueuecommand...

Vulnerability of the qla2xxx_mqueuecommand() function in the drivers/scsi/qla2xxx/qla_os.c module – This driver for supporting SCSI devices in the Linux operating system allows a hacker to cause a service failure.

Vulnerability of the qla2xxxmqueuecommand function in the drivers/scsi/qla2xxx/qlaos.c module – The Linux SCSI device support driver is vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2021-46963: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix crash in qla2xxxmqueuecommand RIP: 0010:kmemcachefree+0xfa/0x1b0 Call Trace: qla2xxxmqueuecommand+0x2b5/0x2c0 qla2xxx scsiqueuerq+0x5e2/0xa40 blkmqtryissuedirectly+0x128/0x1d0 blkmqrequestissuedirectly+0x4e/0xb...