CVE-2022-50493: scsi: qla2xxx: Fix crash when I/O abort times out

Q: What is the severity of CVE-2022-50493?

CVE-2022-50493 has been classified with a moderate severity level due to the potential for crash during I/O operations.

Q: How do I fix CVE-2022-50493?

To fix CVE-2022-50493, update the Linux kernel to the latest version that includes the fix for this vulnerability.

Q: What platforms are affected by CVE-2022-50493?

CVE-2022-50493 affects various versions of the Linux kernel specifically those utilizing the qla2xxx SCSI driver.

Q: What issues can CVE-2022-50493 cause?

CVE-2022-50493 can lead to system crashes during CPU hotplug operations, impacting uptime and system reliability.

Q: Is there a known exploit for CVE-2022-50493?

As of now, there is no known public exploit for CVE-2022-50493, but it is advisable to apply patches promptly to mitigate risk.

Published Oct 4, 2025

Updated

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Fix crash when I/O abort times out

While performing CPU hotplug, a crash with the following stack was seen:

Call Trace: qla24xxprocessresponsequeue+0x42a/0x970 [qla2xxx] qla2x00startnvmemq+0x3a2/0x4b0 [qla2xxx] qlanvmepostcmd+0x166/0x240 [qla2xxx] nvmefcstartfcpop.part.0+0x119/0x2e0 [nvmefc] blkmqdispatchrqlist+0x17b/0x610 blkmqscheddispatchrequests+0xb0/0x140 blkmqscheddispatchrequests+0x30/0x60 blkmqrunhwqueue+0x35/0x90 blkmqdelayrunhwqueue+0x161/0x180 blkexecuterq+0xbe/0x160 nvmesubmitsynccmd+0x16f/0x220 [nvmecore] nvmfconnectadminqueue+0x11a/0x170 [nvmefabrics] nvmefccreateassociation.cold+0x50/0x3dc [nvmefc] nvmefcconnectctrlwork+0x19/0x30 [nvmefc] processonework+0x1e8/0x3c0

On abort timeout, completion was called without checking if the I/O was already completed.

Verify that I/O and abort request are indeed outstanding before attempting completion.

Affected Software

149 affected componentsFixes available

Linux Linux kernel

Linux Linux kernel>=5.3.17<5.4

Linux Linux kernel>=5.4.4<5.15.86

Linux Linux kernel>=5.16<6.0.16

Linux Linux kernel>=6.1<6.1.2

debian/linux<6.1.4-1

6.1.4-1

debian/linux<6.1.4-1

6.1.4-1

debian/linux<6.1.4-1

6.1.4-1

debian/linux

6.1.176-16.1.190-16.12.107-16.12.115-27.2.12-17.2.15-1

ubuntu/linux-hwe-edge*

ubuntu/linux-aws-5.0*

ubuntu/linux-aws-5.3*

ubuntu/linux-aws-5.4*

ubuntu/linux-azure*

ubuntu/linux-azure-5.3*

ubuntu/linux-azure-5.4*

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-5.3*

ubuntu/linux-gcp-5.4*

ubuntu/linux-gke-4.15*

ubuntu/linux-gke-5.4*

ubuntu/linux-gkeop-5.4*

ubuntu/linux-hwe*

ubuntu/linux-hwe-5.4*

ubuntu/linux-hwe-edge*

ubuntu/linux-ibm-5.4*

ubuntu/linux-oem*

ubuntu/linux-oracle-5.0*

ubuntu/linux-oracle-5.3*

ubuntu/linux-oracle-5.4*

ubuntu/linux-raspi-5.4*

ubuntu/linux-aws-5.15<5.15.0-1033.37~20.04.1

5.15.0-1033.37~20.04.1

ubuntu/linux-azure-5.15<5.15.0-1035.42~20.04.1

5.15.0-1035.42~20.04.1

ubuntu/linux-gcp-5.15<5.15.0-1031.38~20.04.1

5.15.0-1031.38~20.04.1

ubuntu/linux-hwe-5.15<5.15.0-69.76~20.04.1

5.15.0-69.76~20.04.1

ubuntu/linux-intel-iotg-5.15<5.15.0-1027.32~20.04.1

5.15.0-1027.32~20.04.1

ubuntu/linux-lowlatency-hwe-5.15<5.15.0-69.76~20.04.1

5.15.0-69.76~20.04.1

ubuntu/linux-nvidia-tegra-5.15<5.15.0-1014.14~20.04.1

5.15.0-1014.14~20.04.1

ubuntu/linux-oracle-5.15<5.15.0-1032.38~20.04.1

5.15.0-1032.38~20.04.1

ubuntu/linux-riscv-5.15<5.15.0-1030.34~20.04.1

5.15.0-1030.34~20.04.1

ubuntu/linux*

ubuntu/linux-aws*

ubuntu/linux-aws-5.11*

ubuntu/linux-aws-5.13*

ubuntu/linux-aws-5.8*

ubuntu/linux-azure*

ubuntu/linux-azure-5.11*

ubuntu/linux-azure-5.13*

ubuntu/linux-azure-5.8*

ubuntu/linux-azure-fde*

ubuntu/linux-bluefield*

ubuntu/linux-gcp*

ubuntu/linux-gcp-5.11*

ubuntu/linux-gcp-5.13*

ubuntu/linux-gcp-5.8*

ubuntu/linux-gke*

ubuntu/linux-gke-5.15*

ubuntu/linux-gkeop*

ubuntu/linux-gkeop-5.15*

ubuntu/linux-hwe-5.11*

ubuntu/linux-hwe-5.13*

ubuntu/linux-hwe-5.8*

ubuntu/linux-ibm*

ubuntu/linux-intel-5.13*

ubuntu/linux-iot*

ubuntu/linux-kvm*

ubuntu/linux-oem-5.10*

ubuntu/linux-oem-5.13*

ubuntu/linux-oem-5.6*

ubuntu/linux-oracle*

ubuntu/linux-oracle-5.11*

ubuntu/linux-oracle-5.13*

ubuntu/linux-oracle-5.8*

ubuntu/linux-raspi*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.11*

ubuntu/linux-riscv-5.8*

ubuntu/linux-xilinx-zynqmp*

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.15.0-69.76

5.15.0-69.76

ubuntu/linux-allwinner-5.19*

ubuntu/linux-aws<5.15.0-1033.37

5.15.0-1033.37

ubuntu/linux-aws-5.19*

ubuntu/linux-aws-6.2*

ubuntu/linux-aws-6.5*

ubuntu/linux-azure<5.15.0-1035.42

5.15.0-1035.42

ubuntu/linux-azure-5.19*

ubuntu/linux-azure-6.2*

ubuntu/linux-azure-6.5*

ubuntu/linux-azure-fde<5.15.0-1035.42.1

5.15.0-1035.42.1

ubuntu/linux-azure-fde-5.19*

ubuntu/linux-azure-fde-6.2*

ubuntu/linux-gcp<5.15.0-1031.38

5.15.0-1031.38

ubuntu/linux-gcp-5.19*

ubuntu/linux-gcp-6.2*

ubuntu/linux-gcp-6.5*

ubuntu/linux-gke<5.15.0-1030.35

5.15.0-1030.35

ubuntu/linux-gkeop<5.15.0-1017.22

5.15.0-1017.22

ubuntu/linux-hwe-5.19*

ubuntu/linux-hwe-6.2*

ubuntu/linux-hwe-6.5*

ubuntu/linux-ibm<5.15.0-1027.30

5.15.0-1027.30

ubuntu/linux-intel-iot-realtime*

ubuntu/linux-intel-iotg<5.15.0-1027.32

5.15.0-1027.32

ubuntu/linux-kvm<5.15.0-1030.35

5.15.0-1030.35

ubuntu/linux-lowlatency<5.15.0-69.76

5.15.0-69.76

ubuntu/linux-lowlatency-hwe-5.19*

ubuntu/linux-lowlatency-hwe-6.2*

ubuntu/linux-lowlatency-hwe-6.5*

ubuntu/linux-nvidia<5.15.0-1023.23

5.15.0-1023.23

ubuntu/linux-nvidia-6.2*

ubuntu/linux-nvidia-6.5*

ubuntu/linux-oem-5.17*

ubuntu/linux-oem-6.0*

ubuntu/linux-oem-6.1*

ubuntu/linux-oem-6.5*

ubuntu/linux-oracle<5.15.0-1032.38

5.15.0-1032.38

ubuntu/linux-oracle-6.5*

ubuntu/linux-raspi<5.15.0-1026.28

5.15.0-1026.28

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.19*

ubuntu/linux-riscv-6.5*

ubuntu/linux-starfive-5.19*

ubuntu/linux-starfive-6.2*

ubuntu/linux-starfive-6.5*

ubuntu/linux-bluefield<5.15.0-1015.17

5.15.0-1015.17

ubuntu/linux-intel-iot-realtime<5.15.0-1023.28

5.15.0-1023.28

ubuntu/linux-realtime<5.15.0-1034.37

5.15.0-1034.37

ubuntu/linux-azure-6.11*

ubuntu/linux-gcp-6.11*

ubuntu/linux-hwe-6.11*

ubuntu/linux-intel*

ubuntu/linux-lowlatency-hwe-6.11*

ubuntu/linux-oem-6.11*

ubuntu/linux-oem-6.8*

ubuntu/linux-raspi-realtime*

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-vmware*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.4-1
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
Upgrade
Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1033.37~20.04.1
Upgrade
Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1035.42~20.04.1
Upgrade
Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1031.38~20.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-69.76~20.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1027.32~20.04.1
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-69.76~20.04.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1014.14~20.04.1
Upgrade
Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1032.38~20.04.1
Upgrade
Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1030.34~20.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.15.0-69.76
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.15.0-1033.37
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.15.0-1035.42
Upgrade
Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.
Fixed in 5.15.0-1035.42.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.15.0-1031.38
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 5.15.0-1030.35
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.15.0-1017.22
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.15.0-1027.30
Upgrade
Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.
Fixed in 5.15.0-1027.32
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.15.0-1030.35
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 5.15.0-69.76
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 5.15.0-1023.23
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.15.0-1032.38
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.15.0-1026.28
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.15.0-1015.17
Upgrade
Upgrade ubuntu/linux-intel-iot-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1023.28
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1034.37

Event History

Oct 4, 2025

CVE Published

via MITRE·03:43 PM

Data Sourced

via MITRE·03:43 PM

DescriptionSeverity

Data Sourced

via OSV·04:15 PM

DescriptionSeverityAffected Software

Data Sourced

via NVD·04:15 PM

RemedyDescriptionSeverityAffected Software

Peer vulnerabilities

Found alongside the following vulnerabilities.

DLA-4664-1

Frequently Asked Questions

What is the severity of CVE-2022-50493?

CVE-2022-50493 has been classified with a moderate severity level due to the potential for crash during I/O operations.

How do I fix CVE-2022-50493?

To fix CVE-2022-50493, update the Linux kernel to the latest version that includes the fix for this vulnerability.

What platforms are affected by CVE-2022-50493?

CVE-2022-50493 affects various versions of the Linux kernel specifically those utilizing the qla2xxx SCSI driver.

What issues can CVE-2022-50493 cause?

CVE-2022-50493 can lead to system crashes during CPU hotplug operations, impacting uptime and system reliability.

Is there a known exploit for CVE-2022-50493?

As of now, there is no known public exploit for CVE-2022-50493, but it is advisable to apply patches promptly to mitigate risk.

CVE-2022-50493: scsi: qla2xxx: Fix crash when I/O abort times out

Affected Software

Remediation

Event History

Peer vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2022-50493?

How do I fix CVE-2022-50493?

What platforms are affected by CVE-2022-50493?

What issues can CVE-2022-50493 cause?

Is there a known exploit for CVE-2022-50493?

Company

Resources

Contact