Vulnerability in Kernel package: scsi: qla2xxx
Summary
GSD-2022-1001128: scsi: qla2xxx: Fix crash during module load unload test. Affects Kernel versions >= 62e9dd177732843ae6c5b9d2ed61e7c9538fa276, < 67f744f73eba870ab96411d0310e831a4adc3713. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Kernel package is an integral part of the Linux operating system, responsible for managing the core functionality and communication between hardware and software components. The scsi: qla2xxx module within the Kernel package handles SCSI (Small Computer System Interface) commands for QLogic Fibre Channel Host Bus Adapters (HBAs). It enables the system to connect and communicate with storage devices using the Fibre Channel protocol. However, a vulnerability has been discovered in this module that can lead to a crash during a module load/unload test.
Vulnerability Detail
The vulnerability in the scsi: qla2xxx module occurs when performing a module load/unload test. It can result in a system crash, impacting the stability and availability of the Linux operating system. The exact attack vector and potential consequences of this vulnerability are yet to be proven. The vulnerability was introduced in version v5.9 of the Linux Kernel by commit 62e9dd177732843ae6c5b9d2ed61e7c9538fa276 and has been fixed in version v5.17.2 by commit 67f744f73eba870ab96411d0310e831a4adc3713.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
The scsi: qla2xxx module in the Kernel package has a vulnerability that can cause a crash during a module load/unload test. It is crucial to update the Linux Kernel to version v5.17.2 or later to mitigate this vulnerability. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The scsi: qla2xxx module is a component of the Linux Kernel package that handles SCSI commands for QLogic Fibre Channel Host Bus Adapters (HBAs). It enables communication between the Linux system and storage devices using the Fibre Channel protocol.
This vulnerability can lead to a crash during a module load/unload test, affecting the stability and availability of the Linux operating system.
There is no information available regarding exploitation of this vulnerability in real-world scenarios.
The vulnerability was introduced in version v5.9 of the Linux Kernel and has been fixed in version v5.17.2.
To fix this vulnerability, it is recommended to update the Linux Kernel package to version v5.17.2 or later. Follow the official update process for your Linux distribution or manually compile the updated Kernel source code.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
