CVE-2024-56623: scsi: qla2xxx: Fix use after free on unload
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Fix use after free on unload
System crash is observed with stack trace warning of use after free. There are 2 signals to tell dpcthread to terminate (UNLOADING flag and kthreadstop).
On setting the UNLOADING flag when dpcthread happens to run at the time and sees the flag, this causes dpcthread to exit and clean up itself. When kthreadstop is called for final cleanup, this causes use after free.
Remove UNLOADING signal to terminate dpcthread. Use the kthreadstop as the main signal to exit dpcthread.
[596663.812935] kernel BUG at mm/slub.c:294! [596663.812950] invalid opcode: 0000 [#1] SMP PTI [596663.812957] CPU: 13 PID: 1475935 Comm: rmmod Kdump: loaded Tainted: G IOE --------- - - 4.18.0-240.el8.x8664 #1 [596663.812960] Hardware name: HP ProLiant DL380p Gen8, BIOS P70 08/20/2012 [596663.812974] RIP: 0010:slabfree+0x17d/0x360
... [596663.813008] Call Trace: [596663.813022] ? dentrykill+0x121/0x170 [596663.813030] ? condresched+0x15/0x30 [596663.813034] ? condresched+0x15/0x30 [596663.813039] ? waitforcompletion+0x35/0x190 [596663.813048] ? trytowakeup+0x63/0x540 [596663.813055] freetask+0x5a/0x60 [596663.813061] kthreadstop+0xf3/0x100 [596663.813103] qla2x00removeone+0x284/0x440 [qla2xxx]
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-56623?
CVE-2024-56623 has a moderate severity level due to the potential for system crashes associated with a use after free vulnerability.
How do I fix CVE-2024-56623?
To resolve CVE-2024-56623, update the Linux kernel to a version higher than 5.10.231, 5.15.174, 6.1.120, 6.2, 6.7, or 6.12.5.
What software is affected by CVE-2024-56623?
CVE-2024-56623 affects multiple versions of the Linux kernel, specifically those prior to certain versions listed in the vulnerability details.
What types of attacks can exploit CVE-2024-56623?
CVE-2024-56623 could potentially be exploited by local attackers to cause system crashes.
Is there a workaround for CVE-2024-56623?
Currently, the recommended solution for CVE-2024-56623 is to apply the necessary kernel updates as there are no known workarounds.