Lucene search

K
ubuntucveUbuntu.comUB:CVE-2021-46963
HistoryFeb 27, 2024 - 12:00 a.m.

CVE-2021-46963

2024-02-2700:00:00
ubuntu.com
ubuntu.com
8
linux kernel
scsi
qla2xxx
vulnerability fix
scsi_queue_rq
blk_mq_request_issue_directly

AI Score

6.6

Confidence

High

EPSS

0

Percentile

10.3%

In the Linux kernel, the following vulnerability has been resolved: scsi:
qla2xxx: Fix crash in qla2xxx_mqueuecommand() RIP:
0010:kmem_cache_free+0xfa/0x1b0 Call Trace:
qla2xxx_mqueuecommand+0x2b5/0x2c0 [qla2xxx] scsi_queue_rq+0x5e2/0xa40
__blk_mq_try_issue_directly+0x128/0x1d0
blk_mq_request_issue_directly+0x4e/0xb0 Fix incorrect call to free srb in
qla2xxx_mqueuecommand(), as srb is now allocated by upper layers. This
fixes smatch warning of srb unintended free.

AI Score

6.6

Confidence

High

EPSS

0

Percentile

10.3%