CVSS 5.5 · Medium EPSS 0,35%
Kerentanan Out-of-bounds Write pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq() When parsing the txq list in lpfc_drain_txq(), the driver attempts to pass the requests to the adapter. If such an attempt fails, a local "fail_msg" string is set and a log message output. The job is then added to a completions list for cancellation. Processing of any further jobs from the txq list continues, but since "fail_msg" remains set, jobs are added to the completions list regardless of whether a wqe was passed to the adapter. If successfully added to txcmplq, jobs are added to both lists resulting in list corruption. Fix by clearing the fail_msg string after adding a job to the completions list. This stops the subsequent jobs from being added to the completions list unless they had an appropriate failure.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| linux | linux kernel | Semua versi sebelum 4.4.293 |
| linux | linux kernel | Versi 4.5 hingga sebelum 4.9.291 |
| linux | linux kernel | Versi 4.10 hingga sebelum 4.14.256 |
| linux | linux kernel | Versi 4.15 hingga sebelum 4.19.218 |
| linux | linux kernel | Versi 4.20 hingga sebelum 5.4.162 |
| linux | linux kernel | Versi 5.5 hingga sebelum 5.10.82 |
| linux | linux kernel | Versi 5.11 hingga sebelum 5.15.5 |