Vigie VulnDBEuropean-hosted Vulnerability DB
FR
Menu

scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Linux Linux)

CVE-2024-26930
HIGH 7.0

At a glance

Source
NVD
EPSS
EPSS 0.23 % · percentile 14 ()
State
PUBLISHED
Published
Updated
Assigner
Linux
NVD status
Modified

Search on…

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix double free of the ha->vp_map pointer Coverity scan reported potential risk of double free of the pointer ha->vp_map. ha->vp_map was freed in qla2x00_mem_alloc(), and again freed in function qla2x00_mem_free(ha). Assign NULL to vp_map and kfree take care of NULL.

Weaknesses (CWE)

References

Scores

VersionScoreVectorScored by
CVSS 3.1HIGH 7.0CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HLinux
CVSS 3.1HIGH 7.0CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HNVD · 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary)
CVSS 3.1HIGH 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HNVD · nvd@nist.gov (Primary)

European references

CERT-FR advisories

Affected configurations (NVD CPE)

Affected products

ProductVersions
Linux · Linuxaffected 430eef03a763e5e76a371ba6d02779ae4a64b6ea < f14cee7a882cb79528f17a2335f53e9fd1848467 ; affected 430eef03a763e5e76a371ba6d02779ae4a64b6ea < b7deb675d674f44e0ddbab87fee8f9f098925e73 ; affected 430eef03a763e5e76a371ba6d02779ae4a64b6ea < 825d63164a2e6bacb059a9afb5605425b485413f ; affected 430eef03a763e5e76a371ba6d02779ae4a64b6ea < e288285d47784fdcf7c81be56df7d65c6f10c58b
Linux · Linuxaffected 6.3 ; unaffected 0 < 6.3 ; unaffected 6.6.24 ≤ 6.6.* ; unaffected 6.7.12 ≤ 6.7.* ; unaffected 6.8.3 ≤ 6.8.* ; unaffected 6.9 ≤ *

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD