From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mx0a-00069f02.pphosted.com (mx0a-00069f02.pphosted.com [205.220.165.32]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 9CDFE78F34; Sat, 28 Dec 2024 18:58:32 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=fail smtp.client-ip=205.220.165.32 ARC-Seal:i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1735412314; cv=fail; b=BcoywOHqDwtBkBeDbYamMEd/JEgNIRKjirsJ5CLf3y01Dmm43b16b0L+lfGwzuggYdIUkjNTas3Xr1+AGHi9jJjz0o9yYVIk8J8hsFuxyiyxVcv7L+tVZ5Kgt4CXAJGsq7xhsxdJydF29Qs4LgE/K8UINof79Tk20FFSFF6j294= ARC-Message-Signature:i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1735412314; c=relaxed/simple; bh=jm8takliQVUOVQyXyd15Ptlpu0LTeIxeSEb0MKfPJZY=; h=Message-ID:Date:Subject:To:Cc:References:From:In-Reply-To: Content-Type:MIME-Version; b=VVgRRic5gAXgRraLYsBz90u0P5wv7LXJu6UTfUKgRaKD3e4q+L3uMklnHVQoHMIerfFHlWi1tcWpHWdz/SQNGHZHyDPrvxmSLuUiGODpluvQ8uNKijx1LjX5n8+FE5ZBfgmqshj1ngaO1fXfBFYjlPy26jQFD2uuqrjpL8xylNM= ARC-Authentication-Results:i=2; smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=oracle.com; spf=pass smtp.mailfrom=oracle.com; dkim=pass (2048-bit key) header.d=oracle.com header.i=@oracle.com header.b=eG2PoRci; dkim=pass (1024-bit key) header.d=oracle.onmicrosoft.com header.i=@oracle.onmicrosoft.com header.b=nOmzV0mf; arc=fail smtp.client-ip=205.220.165.32 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=oracle.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=oracle.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=oracle.com header.i=@oracle.com header.b="eG2PoRci"; dkim=pass (1024-bit key) header.d=oracle.onmicrosoft.com header.i=@oracle.onmicrosoft.com header.b="nOmzV0mf" Received: from pps.filterd (m0246629.ppops.net [127.0.0.1]) by mx0b-00069f02.pphosted.com (8.18.1.2/8.18.1.2) with ESMTP id 4BSHpAcC015953; Sat, 28 Dec 2024 18:58:16 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oracle.com; h=cc :content-transfer-encoding:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to; s= corp-2023-11-20; bh=VJUf6/Y/N9HvPXhOIEnGOFGEWx8wFe/K+ueCsKGzlvA=; b= eG2PoRcisl2x8HR0V6gFfuBcpKxPAdqm0KT7PWyPVRB7k7ZPfdRZhgJYrzXCiikN UqsddFq0QyEfxjV3eGDHj7qh0vZdJcYBh0VOCjCEkbk0N3Us8vqTlznXVH7D08Lc kcgdwikqKKh4Q2ClOOftWLEaAH2dj6wS0y8F94EvniuRsPnhszdIwfP8a4Psm/KT +h/9gqkUOikNHBO/+bXi7rBXyUjmJBrYhlGAjk2980LyR/1VEFKUhyEcr+YYkbAE 3dvNuMAf6mOd7G0jl5liRWeehs65lIyLutDN2Aa+3JKZHBgG9p17TGrFapNFF4jt pnBQ0TtzJ+Z0kvS4mcH1dA== Received: from iadpaimrmta02.imrmtpd1.prodappiadaev1.oraclevcn.com (iadpaimrmta02.appoci.oracle.com [147.154.18.20]) by mx0b-00069f02.pphosted.com (PPS) with ESMTPS id 43t978ge3t-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Sat, 28 Dec 2024 18:58:15 +0000 (GMT) Received: from pps.filterd (iadpaimrmta02.imrmtpd1.prodappiadaev1.oraclevcn.com [127.0.0.1]) by iadpaimrmta02.imrmtpd1.prodappiadaev1.oraclevcn.com (8.18.1.2/8.18.1.2) with ESMTP id 4BSEMrSI013141; Sat, 28 Dec 2024 18:58:14 GMT Received: from nam12-mw2-obe.outbound.protection.outlook.com (mail-mw2nam12lp2044.outbound.protection.outlook.com [104.47.66.44]) by iadpaimrmta02.imrmtpd1.prodappiadaev1.oraclevcn.com (PPS) with ESMTPS id 43t7s5bxev-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Sat, 28 Dec 2024 18:58:14 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=V2UVR9Plx7960kAOmIquK+aRZqCBBXf/v42zfmJZ/gbzuJK9Gso0mx96RuJ0MORZxpClvfcP5iuTEfkHFm09SdWiOgc9EXj7Udtr4nstLs8LmoJM76VmAW3fUfIF+B+O5BA2RYhaRLsYvObknm242+jZRpbUexr8HLvfPmz4UJaFaLEReESRxNGCTKV9q1GDZBD3rDDiFU7AZUPjNLPfS+aiD2VyzTtH9O6sjP6GFRZL0DdeKdEv+HjbDVDq2tUgGzOqqrtJOfXZaoP6pFn6xKXEMEJElykEDdrTxyAaLfJ9ecEUAYaRkvzmkTI8O1hbNlmGHI7ZcAD2R1E058POUw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=VJUf6/Y/N9HvPXhOIEnGOFGEWx8wFe/K+ueCsKGzlvA=; b=S19FyUMNC3MeDjBkZkmlFEPL7NetqSvCCyvLaVTGuTOGiy9KM1jlYFDOjLQTM6v6zJutwU8eBDTr2L+gfGY/uQUP6ojkdGZzILRAgtXqmkfoo+Q4A75CzgF9kJSEOtvJFgCTJ8wXS/vC1UhvGhzcfAgECUbZSh3PSf2lctIcwH7CYJ/Z0iFlEYMsnX8TsY+JSRdNBeX8HB7BwXrtbnUW1NeJIiM4Em5HfGOUDcGE7zr/DyPBm7gLcH/xR0cg3IU22COGHqZVUwCj/7sBpEVJu++F+KVn+F0fqYqriTVNz3w7UlOpCeYlU0h5z1gmYNVq6Vm62fT89yyypLpu8Vy90w== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=oracle.com; dmarc=pass action=none header.from=oracle.com; dkim=pass header.d=oracle.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oracle.onmicrosoft.com; s=selector2-oracle-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=VJUf6/Y/N9HvPXhOIEnGOFGEWx8wFe/K+ueCsKGzlvA=; b=nOmzV0mfNm+W696nCT+QV+rFMxIFs/2JCAHhLxEi7mPIdW/Gx2hLFz41mRcYY1TQd0x19GmUNecvCPjP3T/01qjWqMJDdE1lrnhL7ogw04//P81yrQRhqWYzDmRaSfBXhQEXu+w2obYm9VVPFuFiOLV5GOzDp8+MuBmnZ3YoMR0= Received: from DM4PR10MB6886.namprd10.prod.outlook.com (2603:10b6:8:102::10) by DM4PR10MB6255.namprd10.prod.outlook.com (2603:10b6:8:8e::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8293.14; Sat, 28 Dec 2024 18:58:08 +0000 Received: from DM4PR10MB6886.namprd10.prod.outlook.com ([fe80::bdcc:98f5:ebd5:cd38]) by DM4PR10MB6886.namprd10.prod.outlook.com ([fe80::bdcc:98f5:ebd5:cd38%6]) with mapi id 15.20.8293.000; Sat, 28 Dec 2024 18:58:08 +0000 Message-ID: <6d1c4ea0-6c5b-409a-b465-ad2e5220d6f4@oracle.com> Date: Sun, 29 Dec 2024 00:28:01 +0530 User-Agent: Mozilla Thunderbird Subject: Re: CVE-2024-26929: scsi: qla2xxx: Fix double free of fcport To: cve@kernel.org, linux-kernel@vger.kernel.org, linux-cve-announce@vger.kernel.org, skashyap@marvell.com Cc: Greg Kroah-Hartman , Vegard Nossum References: <2024050122-CVE-2024-26929-07f0@gregkh> Content-Language: en-US From: Harshit Mogalapalli In-Reply-To: <2024050122-CVE-2024-26929-07f0@gregkh> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-ClientProxiedBy: SI2PR01CA0026.apcprd01.prod.exchangelabs.com (2603:1096:4:192::16) To DM4PR10MB6886.namprd10.prod.outlook.com (2603:10b6:8:102::10) Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DM4PR10MB6886:EE_|DM4PR10MB6255:EE_ X-MS-Office365-Filtering-Correlation-Id: 82ec04be-22d0-4389-d375-08dd2771912d X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|376014|1800799024|366016; X-Microsoft-Antispam-Message-Info: =?utf-8?B?bEswL01oeFdYRm1vY2NmeGhneG1oU1BYVUhaZmlCakp2UkIrc0xPL1MzSjFo?= =?utf-8?B?R1pxMjFpc0lIK2syV1FSNUxsNDJBNVhTbE9JOGJOQXFReUhSWE1tV0hLdFFw?= =?utf-8?B?Z1pLcnMrcEVSK1E0VElFdFVpSEd1VlpIR29jSDVIeDRUN1RLc1dPc0czdW4x?= =?utf-8?B?MUlpa0xOQkU3ZmpoVFhWcjBqeEhRNk9NRkNUMGpIc0NmTFdUTEhqdzRKclVP?= =?utf-8?B?QVpMaGZYeXR1Z3l6cnY0V0hqRUl0Zld1K1YwWDg0T3Y5NXJHeHhSM3RRbzVJ?= =?utf-8?B?a3pQY1ZSZkpwUHcwLzRuNmxsaXR1c2RqM3NBYmxINkgwWFBjc1ZnUGgyeURY?= =?utf-8?B?RnliamhhdkZSOG83R09pNDlQdjVIQVhLWGhxNnAyNktEVk0wUjU4QVNBbVc2?= =?utf-8?B?NHphQzJuMnRhQmMyQm1TUXZ6S0htVVdEbTdJS0tFakJsVmdlekJoZktXK2w3?= =?utf-8?B?RXBhbmJKdHErWFFYMzFwREsvNGNBcjdOdTNpKytiLzhZcFdqT25vLzRjZzBi?= =?utf-8?B?QzRrSEZEazhOQmtPODczTGU4dU41cUxzV0RtL2dHb2hYWmpYb0V2Rk5BamZ0?= =?utf-8?B?U1pDYkVISnJpbXdBZDhyTUpkTUJhTXVJY0svcUphejdjcWowa0FBNUNUSVF4?= =?utf-8?B?eG1hWm1uY2k2ZHpkRE9CdXdTdVJyZmZvbzJYOGw0UDZOejEzR2lpdWxHaVNn?= =?utf-8?B?TmFqRmtEQ2VPS2p0dVQzQ094bkdDMDZDeEJoK2ViZ2prd2J1Y2szbnJDY2dY?= =?utf-8?B?QlBDMEMyVFp6Zzc5M0dKQ1FtRFo4SzUvc3BIaXZIT3RuNitiRUQ2NHRPOW9l?= =?utf-8?B?ajdhWFZ0WnBIL1l1cExRaHlQbEpoRDZlSmZvN1VCVGZJTGp0THoyTHB2S3hI?= =?utf-8?B?WmpkSi9sYy9JNjhyNUZHT3Y3Z1Jmelh0L2k3UWh6UnUrTFZnV29mYm1DRG1h?= =?utf-8?B?NHAwQzZRVXpvVHRQOEQ4SWc3aUlsQ3Q5T0MyM0FnSUZ4K2t6UEFjZ0t3Mmk2?= =?utf-8?B?NHBHcWIxckt4eDQyemZoNEZ5V0E2bC9YM3Y4eUU1NjBtVDRPVktScXVudUpl?= =?utf-8?B?c0ZyYWh1YytjcWFRcWxsVnM5SnRUSWtxc21wQlBTU2kvZTc2TDhrVVQ2VE15?= =?utf-8?B?dXVEbHpENlpOTlJjRURQa3Q5eTY3RENXTEplSnB1N3AzYm5pMUdFV0x1R3pp?= =?utf-8?B?eFVZN0grT3ZJaGlFWTlBUFRxR0FlSStUMDhudy9WNzcvcjJKZllPdFZkWVNo?= =?utf-8?B?eFVaOXRBVlFESVRrNTk5QlFwTkp3K0tZK1M3N2F6L0JVeWwwSXNjZ3dINDNC?= =?utf-8?B?blBsMlJNek02OWVPQ1NSSlJlYlBFNmhlZlJZbzFUUG9zSWJrSTZpSHRrclhK?= =?utf-8?B?ZTZqd09ZNXR4Zk82Q25xcnovdUY4N0dJVEJTRlltMnFZVWNwQmM0L0FFUzVT?= =?utf-8?B?RnJuNld3SlQwSVJvamZXOEpjbEpYR0ZJanBZSjBvM2ZvTWEyN2pObFR0R050?= =?utf-8?B?OFdnRlF5azhxM0pyaEZYTmljRGMrSU9DbkpEZUVtdGZHUXpMQVI4cUtSQmhU?= =?utf-8?B?VzRhQTIyN2EyM0ZMZ0VkVEw0NW5vQmNZZTN5ZFBnL2FHWExwWmZBL3dBdGZM?= =?utf-8?B?Wkh2SWQwRVdHQjc5QWhtdzZ6R3RjclIxNW9lN201cjQ2MU5MQUVpRk1RWk9k?= =?utf-8?B?ZGE1czA1Rk05Y2h5SWVJN21GT0NYdUd5MDB3RVVPcGl2ZFF4YXFCWVQycVZl?= =?utf-8?B?eUFUOG5rKzlTeHpKZU9wdWIrY3ZXMndxeVFlUDdFSWREMVpIdkhkWWt0NkEz?= =?utf-8?B?UmhtMXFmeFdLSjJwYVY4dz09?= X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DM4PR10MB6886.namprd10.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(376014)(1800799024)(366016);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?dTdPVTI4S05WVWI4cHFDMXR6eDdwRkJvcTMvc2VVLzIrQVFOKzh3bG1ZM00x?= =?utf-8?B?eWZuVlZ5QzYrWUZJeFY5U3dtVE05SkFIUUxPWEx1cThFeVBVcWN1OEtjeDNo?= =?utf-8?B?cXowMUMzK1Y4dStJTURLcEQ1SlJGZkxTMWRTczBFNlNTKzhZNXBWdTJaclZK?= =?utf-8?B?RG44aVB2YTV1aWFOZFNzcHlhZTJ1aG5EaitJMUpMeXRHMWx4cHU2WDUzQ29h?= =?utf-8?B?TjErUHErWGJORU1wQjBZbkNGMFFadmJ2UWIvNnBCTGZ0RVBoaGk5ZzNDa2pY?= =?utf-8?B?T09LV0R6M2hHMW9QQnQ4WGZKT1dsTGdNR1lseEUxRzhIZHZZdkVkZTJ4QVVl?= =?utf-8?B?T205TkN6U2dxalRIcGJCSmtZZ3Uzam02RjNJSTd3MEhvMVdzQzBtMTBJVmdU?= =?utf-8?B?TitBQURSZjVHUDhLZC92QysxajcvYThTRTk1TWU1ckEwOGpxYWdwbGJhOW8z?= =?utf-8?B?cTQ3eWUxaDJLN2w3MW9wYldrWU42WkpMQjZtOTNUamEwNks1c2tGODlCUmdB?= =?utf-8?B?ZllESTdFd0l1amVoK3FObUpsNTZnWnhIaG9zd2ZobUV0b0hucE55ZDVKZkFM?= =?utf-8?B?bXJKNVdhN3pTNXVpME9RNUNnRXlYdkxyZ3h1UUlkeXE2VVFUdWlXeUVBWHgx?= =?utf-8?B?TEZESkVQdENDOWlwT2RNWFJETjVVaGJmZUlpOEVMMG9rVFZLZEdzWWk0U0V0?= =?utf-8?B?akJtbDJMbHpTMDdlUmdoK0QyWXhuK2wvbTBTUVhjb2pua3FoMkV0R3RQcmRy?= =?utf-8?B?R21RTXp0NVRTWkdIekNIQmhwZExZTTcxbHI4dVBtdThJa2lOaGluZ2RlajNZ?= =?utf-8?B?WXE3bDJzK0NSNkV3NlVBZnJXU1Q0MC9PV2hvcXlQRmpjbTk0emRoVVV3eHRO?= =?utf-8?B?ZXRLZ3VncnBDY1g5Rld5cUJJUUJkRkM4OTRybFlndTVlNytiaStVd0laSVNE?= =?utf-8?B?U2RwNEw4TjlmeEVEMGlUNDQveTZ2eTZrakhpVGtQNDhNU3dyalcyWjJranpQ?= =?utf-8?B?ZGJ0bUxSaVhrS1pkNmJnSTZidVhGaUo3ZFJINUNLaHl5OFRjOUJwUk1rMmpO?= =?utf-8?B?UUNvcXQ1ZThKcTh4Q3hJN2o3T2NwVWZEU3VsZWVNTFNFVHZ0eHRjVzJVbzZi?= =?utf-8?B?aUxRSENIeEZkdVlqbWhMbmRJUHppVnJ6bmNWTWtncS9ib0dud1JJdFB0eHFP?= =?utf-8?B?ZVhxYXNKQjkwSFh2TkIyaGJhSkFsbG9HMTB6c2JWSFJQSWlDZ0VUbFd3elJa?= =?utf-8?B?NmV1MXIwM09kNVRtaHRsNjZsdkhzcWl4c05wam0yYUptNDJrV0ZIdGhnMkg0?= =?utf-8?B?dWlpL0tQelpmZ1VraFhCbUM5V1ZSV3o2c0JCejl4Zk14N3ZUK1VUL2hPc2hM?= =?utf-8?B?RG9LcDNuRXFSMHhudC9KaVhmMDNVQVBkbkJJZncvY1JEcGdkcUhBU20xUWFG?= =?utf-8?B?L1IrTk0xcWZzNFVzTDB4dkFuYzhKV0xaby9jc09mSGU4MDJKRXE0cVBzRFZO?= =?utf-8?B?eEZKYUdtZzhGejB2bGNHZEZlaW9HeEhsUHZyRjhLNzh5VDV6b1ZTYjlrbnEw?= =?utf-8?B?TEJocjRpeVp2eFVWeUxPRzBlSDFQa2lSWExKNmpwRlUzbVRHY1BNZ2ZnbUF3?= =?utf-8?B?NU1MWlhBTXpJT3ZuVThNenJUUnBjaHVKNEhhUFI2aGxzSXNxOGlkOEhtOHc2?= =?utf-8?B?SmRhdGJjanFtdkU0c0swNUw3OFlrWmY2NE5oczRwbjhoTXFLZ1pmSnE0MVB2?= =?utf-8?B?dUF3bmk2cmdVZnVZenBzMkEzUXByK3M0M3JWb0p2cjlQYTlycTdNZGpGNGhn?= =?utf-8?B?MDg4cTkxaXM3UXRodldNRVg3b3dMY0ZZcFF4bGRRME5id0tPSVZuaG04cWJ4?= =?utf-8?B?RmMzOWNXQTFvSldQM2V0S3ptL2kxQ2JmRUxTVE0xM2V5TW9JbGtUWjl1a28z?= =?utf-8?B?S0ZKbGFKbjRGNTltTjhRK3NudG55Qm43OE5CdVkzUlpNRVV4cW5zTWllRVMz?= =?utf-8?B?THhLVWN3ZEtBdXh2VCtNRXNXUittYVB1WFdGSktmcmRnM0dmaVZkSVQ0anVZ?= =?utf-8?B?TmR5dU5mZ2FBT1RqdncvWEV0V1pUNWQrODNEOU4yUWdKT1pQR3ZvbFh5NkRy?= =?utf-8?B?YzBZc1BPZTk1TGRLSFhzdll2T3BrdkxDTUlraTFTK1paanhxOGpWa3ZiZGsv?= =?utf-8?Q?9Y02NwdDdaMN1hLeyCLlfEM=3D?= X-MS-Exchange-AntiSpam-ExternalHop-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-ExternalHop-MessageData-0: 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 X-OriginatorOrg: oracle.com X-MS-Exchange-CrossTenant-Network-Message-Id: 82ec04be-22d0-4389-d375-08dd2771912d X-MS-Exchange-CrossTenant-AuthSource: DM4PR10MB6886.namprd10.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 28 Dec 2024 18:58:08.0476 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 4e2c6054-71cb-48f1-bd6c-3a9705aca71b X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: l7fSinmnX+X66K+loyW8lVp1nLWuYHqnSW8/ZSW9QDcwPpFMJbO+4PHqR81+i07JL7l1qLKXMrj2Tx65E72jEVvuyVYlyTKQpBEu/3wGvhaTk1fUxxT7Kg6iKy+uziFf X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM4PR10MB6255 X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1057,Hydra:6.0.680,FMLib:17.12.68.34 definitions=2024-12-28_05,2024-12-24_01,2024-11-22_01 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 bulkscore=0 phishscore=0 spamscore=0 malwarescore=0 suspectscore=0 mlxscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2411120000 definitions=main-2412280162 X-Proofpoint-ORIG-GUID: CgqCPNCTbkf1u52Ne8qMAFVz-7leq__M X-Proofpoint-GUID: CgqCPNCTbkf1u52Ne8qMAFVz-7leq__M Hi, On 01/05/24 10:51, Greg Kroah-Hartman wrote: > Description > =========== > > In the Linux kernel, the following vulnerability has been resolved: > > scsi: qla2xxx: Fix double free of fcport > > The server was crashing after LOGO because fcport was getting freed twice. > > -----------[ cut here ]----------- > kernel BUG at mm/slub.c:371! > invalid opcode: 0000 1 SMP PTI > CPU: 35 PID: 4610 Comm: bash Kdump: loaded Tainted: G OE --------- - - 4.18.0-425.3.1.el8.x86_64 #1 > Hardware name: HPE ProLiant DL360 Gen10/ProLiant DL360 Gen10, BIOS U32 09/03/2021 > RIP: 0010:set_freepointer.part.57+0x0/0x10 > RSP: 0018:ffffb07107027d90 EFLAGS: 00010246 > RAX: ffff9cb7e3150000 RBX: ffff9cb7e332b9c0 RCX: ffff9cb7e3150400 > RDX: 0000000000001f37 RSI: 0000000000000000 RDI: ffff9cb7c0005500 > RBP: fffff693448c5400 R08: 0000000080000000 R09: 0000000000000009 > R10: 0000000000000000 R11: 0000000000132af0 R12: ffff9cb7c0005500 > R13: ffff9cb7e3150000 R14: ffffffffc06990e0 R15: ffff9cb7ea85ea58 > FS: 00007ff6b79c2740(0000) GS:ffff9cb8f7ec0000(0000) knlGS:0000000000000000 > CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 > CR2: 000055b426b7d700 CR3: 0000000169c18002 CR4: 00000000007706e0 > DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 > DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 > PKRU: 55555554 > Call Trace: > kfree+0x238/0x250 > qla2x00_els_dcmd_sp_free+0x20/0x230 [qla2xxx] > ? qla24xx_els_dcmd_iocb+0x607/0x690 [qla2xxx] > qla2x00_issue_logo+0x28c/0x2a0 [qla2xxx] > ? qla2x00_issue_logo+0x28c/0x2a0 [qla2xxx] > ? kernfs_fop_write+0x11e/0x1a0 > > Remove one of the free calls and add check for valid fcport. Also use > function qla2x00_free_fcport() instead of kfree(). > > The Linux kernel CVE team has assigned CVE-2024-26929 to this issue. > > > Affected and fixed versions > =========================== > > Fixed in 5.15.154 with commit b03e626bd6d3 > Fixed in 6.1.84 with commit 282877633b25 > Fixed in 6.6.24 with commit f85af9f1aa5e > Fixed in 6.7.12 with commit 9b43d2884b54 > Fixed in 6.8.3 with commit 846fb9f112f6 > Fixed in 6.9-rc2 with commit 82f522ae0d97 > I think the broken commit/vuln commit is: 4895009c4bb7 ("scsi: qla2xxx: Prevent command send on chip reset") and this is only present in stable kernels newer than (>=) 5.15.y. Is it worth putting the vuln commit information if we find out what the broken/vuln commit is while trying to backport it to older stable kernels ? Thanks, Harshit > Please see https://www.kernel.org for a full list of currently supported > kernel versions by the kernel community. > > Unaffected versions might change over time as fixes are backported to > older supported kernel versions. The official CVE entry at > https://cve.org/CVERecord/?id=CVE-2024-26929 > will be updated if fixes are backported, please check that for the most > up to date information about this issue. > > > Affected files > ============== > > The file(s) affected by this issue are: > drivers/scsi/qla2xxx/qla_iocb.c > > > Mitigation > ========== > > The Linux kernel CVE team recommends that you update to the latest > stable kernel version for this, and many other bugfixes. Individual > changes are never tested alone, but rather are part of a larger kernel > release. Cherry-picking individual commits is not recommended or > supported by the Linux kernel community at all. If however, updating to > the latest release is impossible, the individual changes to resolve this > issue can be found at these commits: > https://git.kernel.org/stable/c/b03e626bd6d3f0684f56ee1890d70fc9ca991c04 > https://git.kernel.org/stable/c/282877633b25d67021a34169c5b5519b1d4ef65e > https://git.kernel.org/stable/c/f85af9f1aa5e2f53694a6cbe72010f754b5ff862 > https://git.kernel.org/stable/c/9b43d2884b54d415caab48878b526dfe2ae9921b > https://git.kernel.org/stable/c/846fb9f112f618ec6ae181d8dae7961652574774 > https://git.kernel.org/stable/c/82f522ae0d97119a43da53e0f729275691b9c525