CVE-2024-50183: scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance
In the Linux kernel, the following vulnerability has been resolved:
scsi: lpfc: Ensure DAID handling completion before deleting an NPIV instance
Deleting an NPIV instance requires all fabric ndlps to be released before an NPIV's resources can be torn down. Failure to release fabric ndlps beforehand opens kref imbalance race conditions. Fix by forcing the DAID to complete synchronously with usage of waitqueue.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50183?
CVE-2024-50183 has a severity rating that needs to be evaluated based on its impact on system security and functionality.
How do I fix CVE-2024-50183?
To fix CVE-2024-50183, ensure your Linux kernel is updated to a version beyond 6.1.113 or between 6.2 and 6.6.57, or between 6.7 and 6.11.4.
Which Linux kernel versions are affected by CVE-2024-50183?
CVE-2024-50183 affects Linux kernel versions prior to 6.1.113, versions between 6.2 and 6.6.57, and versions between 6.7 and 6.11.4.
What components are vulnerable in CVE-2024-50183?
CVE-2024-50183 specifically targets the SCSI LPFC driver within the Linux kernel.
What are the implications of CVE-2024-50183?
The implications of CVE-2024-50183 include potential resource management issues when deleting NPIV instances which could affect system stability.