CVE-2024-50183

MEDIUM

Linux Kernel - Race Condition in NPIV Instance Deletion via DA_ID Handling

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance Deleting an NPIV instance requires all fabric ndlps to be released before an NPIV's resources can be torn down. Failure to release fabric ndlps beforehand opens kref imbalance race conditions. Fix by forcing the DA_ID to complete synchronously with usage of wait_queue.

References (5)

Core 5

Scores

CVSS v3 4.7
EPSS 0.0016
EPSS Percentile 5.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-362
Status published
Products (14)
linux/Kernel 5.17.0 - 6.1.113linux
linux/Kernel 6.2.0 - 6.6.57linux
linux/Kernel 6.7.0 - 6.11.4linux
Linux/Linux < 5.17
Linux/Linux 5.17
Linux/Linux 6.1.113 - 6.1.*
Linux/Linux 6.11.4 - 6.11.*
Linux/Linux 6.12
Linux/Linux 6.6.57 - 6.6.*
Linux/Linux 8ed190a91950564775cbaae9e8e8083a69a8da23 - 0857b1c573c0b095aa778bb26d8b3378172471b6
... and 4 more
Published Nov 08, 2024
Tracked Since Feb 18, 2026