CVE-2024-26929: scsi: qla2xxx: Fix double free of fcport
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Fix double free of fcport
The Linux kernel CVE team has assigned CVE-2024-26929 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024050122-CVE-2024-26929-07f0@gregkh/T
Other sources
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix double free of fcport The server was crashing after LOGO because fcport was getting freed twice. -----------[ cut here ]----------- kernel BUG at mm/slub.c:371! invalid opcode: 0000 1 SMP PTI CPU: 35 PID: 4610 Comm: bash Kdump: loaded Tainted: G OE --------- - - 4.18.0-425.3.1.el8.x8664 #1 Hardware name: HPE ProLiant DL360 Gen10/ProLiant DL360 Gen10, BIOS U32 09/03/2021 RIP: 0010:setfreepointer.part.57+0x0/0x10 RSP: 0018:ffffb07107027d90 EFLAGS: 00010246 RAX: ffff9cb7e3150000 RBX: ffff9cb7e332b9c0 RCX: ffff9cb7e3150400 RDX: 0000000000001f37 RSI: 0000000000000000 RDI: ffff9cb7c0005500 RBP: fffff693448c5400 R08: 0000000080000000 R09: 0000000000000009 R10: 0000000000000000 R11: 0000000000132af0 R12: ffff9cb7c0005500 R13: ffff9cb7e3150000 R14: ffffffffc06990e0 R15: ffff9cb7ea85ea58 FS: 00007ff6b79c2740(0000) GS:ffff9cb8f7ec0000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055b426b7d700 CR3: 0000000169c18002 CR4: 00000000007706e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 PKRU: 55555554 Call Trace: kfree+0x238/0x250 qla2x00elsdcmdspfree+0x20/0x230 [qla2xxx] ? qla24xxelsdcmdiocb+0x607/0x690 [qla2xxx] qla2x00issuelogo+0x28c/0x2a0 [qla2xxx] ? qla2x00issuelogo+0x28c/0x2a0 [qla2xxx] ? kernfsfopwrite+0x11e/0x1a0 Remove one of the free calls and add check for valid fcport. Also use function qla2x00freefcport() instead of kfree().
— Launchpad
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
— NVD
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26929?
CVE-2024-26929 is a critical vulnerability due to a double free issue in the Linux kernel.
Which versions of the Linux kernel are affected by CVE-2024-26929?
CVE-2024-26929 affects multiple Linux kernel versions including versions up to 5.15.154, 6.1.84, 6.6.24, 6.7.12, 6.8.3, and 6.9.
How do I fix CVE-2024-26929?
To fix CVE-2024-26929, update to the latest available kernel version that resolves this vulnerability.
What is the impact of CVE-2024-26929 on system security?
CVE-2024-26929 could potentially allow an attacker to execute arbitrary code with elevated privileges.
Is there a workaround for CVE-2024-26929 if I cannot update my kernel?
There are no known effective workarounds for CVE-2024-26929, so updating the kernel is the recommended action.