CVE-2024-42288

scsi: qla2xxx: Fix for possible memory corruption

MEDIUM

5.5

CVSS Score

Published: August 17, 2024 at 09:08 AM UTC

Updated: August 5, 2026 at 12:04 PM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix for possible memory corruption Init Control Block is dereferenced incorrectly. Correctly dereference ICB

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

v < 5.4.2824.20 ≤ v < 5.10.2244.20 ≤ v < 5.15.1654.20 ≤ v < 5.4.2824.20 ≤ v < 6.1.1034.20 ≤ v < 6.10.34.20 ≤ v < 6.114.20 ≤ v < 6.6.445.11 ≤ v < 5.15.1655.16 ≤ v < 6.1.1035.5 ≤ v < 5.10.2246.2 ≤ v < 6.6.446.7 ≤ v < 6.10.34.20645cb8350cdb60bfbf91caa722984b81c215add

Vendor states this is fixed in 2a15b59a2c5afac89696e44acf5bbfc0599c6c5e (fixed)

Vendor states this is fixed in 571d7f2a08836698c2fb0d792236424575b9829b (fixed)

Vendor states this is fixed in 8192c533e89d9fb69b2490398939236b78cda79b (fixed)

Vendor states this is fixed in 87db8d7b7520e99de71791260989f06f9c94953d (fixed)

Vendor states this is fixed in b0302ffc74123b6a99d7d1896fcd9b2e4072d9ce (fixed)

Vendor states this is fixed in c03d740152f78e86945a75b2ad541bf972fab92a (fixed)

Vendor states this is fixed in dae67169cb35a37ecccf60cfcd6bf93a1f4f5efb (fixed)

Vendor states this is fixed in 4.20 (unaffected)

Vendor states this is fixed in 5.10.224 (unaffected)

Vendor states this is fixed in 5.15.165 (unaffected)

Vendor states this is fixed in 5.4.282 (unaffected)

Vendor states this is fixed in 6.1.103 (unaffected)