Vulnerability in Kernel: scsi: qedf: Fix refcount issue when LOGO is received during TMF
Summary
GSD-2022-1000419: scsi: qedf: Fix refcount issue when LOGO is received during TMF. Affects Kernel versions < 6be8eaad75ca73131e2a697f0270dc8ee73814a8. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a fundamental component of the Linux operating system that acts as a bridge between the hardware and software layers. It provides essential functionalities and services to enable the proper functioning of the system. The scsi (Small Computer System Interface) subsystem within the Kernel handles communication between the operating system and SCSI devices, such as hard drives and tape drives. The qedf driver is responsible for supporting the QLogic FC (Fibre Channel) HBA (Host Bus Adapter) in the Kernel. This vulnerability specifically affects the qedf driver when a LOGO (Logout) message is received during a TMF (Task Management Function) operation.
Vulnerability Detail
The vulnerability arises from a refcount issue in the qedf driver when a LOGO message is received during a TMF operation. This issue can potentially lead to a use-after-free condition, where a reference to a deallocated memory object is accessed. An attacker could exploit this vulnerability by sending a specially crafted LOGO message to a system with the qedf driver enabled, potentially resulting in a denial-of-service (DoS) condition or arbitrary code execution. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No workaround has been provided for this vulnerability.
Conclusion
In conclusion, the Kernel vulnerability in the qedf driver can be mitigated by updating the Linux Kernel to version v5.15.24 or later. This fix resolves a refcount issue that could potentially lead to a use-after-free condition. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Kernel is a fundamental component of the Linux operating system that acts as a bridge between the hardware and software layers. It provides essential functionalities and services to enable the proper functioning of the system.
The scsi (Small Computer System Interface) subsystem within the Kernel handles communication between the operating system and SCSI devices, such as hard drives and tape drives.
The qedf driver is responsible for supporting the QLogic FC (Fibre Channel) HBA (Host Bus Adapter) in the Kernel.
A LOGO (Logout) message is a SCSI command used to terminate a connection between a SCSI initiator and a SCSI target.
A TMF (Task Management Function) operation is a SCSI command used to manage tasks and operations on SCSI devices.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
