Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2024-24855

Опубликовано: 05 фев. 2024
Источник: redhat
CVSS3: 4.7

Описание

A race condition was found in the Linux kernel's scsi device driver in lpfc_unregister_fcf_rescan() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue.

A race condition vulnerability was found in the Linux kernel's SCSI device driver in the lpfc_unregister_fcf_rescan() function. This issue can result in a NULL pointer dereference issue, possibly leading to a kernel panic or denial of service.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6kernelOut of support scope
Red Hat Enterprise Linux 7kernelOut of support scope
Red Hat Enterprise Linux 7kernel-rtOut of support scope
Red Hat Enterprise Linux 8kernelWill not fix
Red Hat Enterprise Linux 8kernel-rtFix deferred
Red Hat Enterprise Linux 9kernelAffected
Red Hat Enterprise Linux 9kernel-rtAffected

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-367
https://bugzilla.redhat.com/show_bug.cgi?id=2262983kernel: Race condition in lpfc_unregister_fcf_rescan() in scsi/lpfc/lpfc_hbadisc.c

4.7 Medium

CVSS3

Связанные уязвимости

CVSS3: 5
ubuntu
около 2 лет назад

A race condition was found in the Linux kernel's scsi device driver in lpfc_unregister_fcf_rescan() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue.

CVSS3: 5
nvd
около 2 лет назад

A race condition was found in the Linux kernel's scsi device driver in lpfc_unregister_fcf_rescan() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue.

CVSS3: 5
debian
около 2 лет назад

A race condition was found in the Linux kernel's scsi device driver in ...

CVSS3: 5
github
около 2 лет назад

A race condition was found in the Linux kernel's scsi device driver in lpfc_unregister_fcf_rescan() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue.

CVSS3: 4.7
fstec
около 2 лет назад

Уязвимость функции lpfc_unregister_fcf_rescan() в модуле drivers/scsi/lpfc/lpfc_hbadisc.c подсистемы SCSI ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

4.7 Medium

CVSS3