CVE-2024-49891: scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
In the Linux kernel, the following vulnerability has been resolved:
scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
When the HBA is undergoing a reset or is handling an errata event, NULL ptr dereference crashes may occur in routines such as lpfcsliflushiorings(), lpfcdevlosstmocallbk(), or lpfcaborthandler().
Add NULL ptr checks before dereferencing hdwq pointers that may have been freed due to operations colliding with a reset or errata event handler.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49891?
CVE-2024-49891 has been classified as having a high severity due to the potential for system crashes.
How do I fix CVE-2024-49891?
To fix CVE-2024-49891, update the Linux kernel to version 6.10.14 or to any version between 6.11 and 6.11.3.
What systems are affected by CVE-2024-49891?
CVE-2024-49891 affects Linux kernel versions up to 6.10.14 and versions between 6.11 and 6.11.3.
What type of vulnerability is CVE-2024-49891?
CVE-2024-49891 is a NULL pointer dereference vulnerability that can cause system crashes.
When was CVE-2024-49891 disclosed?
The exact disclosure date of CVE-2024-49891 is not provided, but it pertains to a recent vulnerability resolved in the Linux kernel.