CVE-2024-24855

MEDIUM

Race condition vulnerability in Linux kernel scsi device driver lpfc_unregister_fcf_rescan()

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2024-24855 has a selected CVSS score of 5.0 (medium).

Description

A race condition was found in the Linux kernel's scsi device driver in lpfc_unregister_fcf_rescan() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 6, 2024 · Source: CVE List

Affected products and versions

4
ProductSourceVersion range

Linux kernel

Browse Linux / Linux kernelkernel

Default status: unaffected

CVE Listv2.6.34-rc2 to < v6.5-rc2affected

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP

Browse Siemens / SIMATIC S7-1500 CPU 1518-4 PN/DP MFP

Default status: unknown

CVE ListV3.1.5 to < *affected

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP

Browse Siemens / SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP

Default status: unknown

CVE ListV3.1.5 to < *affected

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP

Browse Siemens / SIPLUS S7-1500 CPU 1518-4 PN/DP MFP

Default status: unknown

CVE ListV3.1.5 to < *affected

References

4