Re: CVE-2024-26929: scsi: qla2xxx: Fix double free of fcport

[Harshit Mogalapalli <harshit.m.mogalapalli@oracle.com>]

Hi Greg,

On 29/12/24 12:54, Greg Kroah-Hartman wrote:
...
>>
>>
>> I think the broken commit/vuln commit is: 4895009c4bb7 ("scsi: qla2xxx:
>> Prevent command send on chip reset") and this is only present in stable
>> kernels newer than (>=) 5.15.y.
>>
>> Is it worth putting the vuln commit information if we find out what the
>> broken/vuln commit is while trying to backport it to older stable kernels ?
> 
> Yes it is, our tools provide for this, see:
> 	https://git.kernel.org/pub/scm/linux/security/vulns.git/tree/cve/schema#n69
> for how to do it (i.e. give us a git id and we can add a .vulnerable
> file so the tools pick it up properly, or send us a patch for that!)
> 
> Do you want to send a patch for this, or do you need us to?
> 

I will send a patch, thanks for the guidance.


Thanks,
Harshit

> thanks,
> 
> greg k-h