7.5

CVE-2026-89863

scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check

qla_chk_edif_rx_sa_delete_pending() obtains the SCSI command via
GET_CMD_SP(sp) and immediately dereferences cmd->sc_data_direction.
That command pointer can be NULL: the firmware may post a status
completion for a command that has already been returned or aborted.  The
caller qla2x00_status_entry() acknowledges this on the very same status
path, re-fetching GET_CMD_SP(sp) and bailing out with the "Command
already returned" message when it is NULL -- but that check runs only
after qla_chk_edif_rx_sa_delete_pending() has already dereferenced the
pointer, so a NULL cmd crashes the kernel in interrupt context.

Return early when cmd is NULL, before touching cmd->sc_data_direction.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version dd30706e73b70d67e88fdaca688db7a3374fd5de
Version < e479e9b148456905d12711411484b94083c8ff58
Status affected
Version dd30706e73b70d67e88fdaca688db7a3374fd5de
Version < 2191b0034a2f1307d421782e6eceddf8eec9e7f6
Status affected
Version dd30706e73b70d67e88fdaca688db7a3374fd5de
Version < de0c8ef3b900c5e971c82ef38c6f5c22c5f3d8c1
Status affected
Version dd30706e73b70d67e88fdaca688db7a3374fd5de
Version < 96eb8a3fc9f7fe7ba32679fcf1d2fd7d251e7a8b
Status affected
Version dd30706e73b70d67e88fdaca688db7a3374fd5de
Version < 94bfb61478bcb207d27f8cd24fd231421059519f
Status affected
Version dd30706e73b70d67e88fdaca688db7a3374fd5de
Version < 75fd6d041c4a325ae37f4683e6678d3015988bb0
Status affected
Version dd30706e73b70d67e88fdaca688db7a3374fd5de
Version < c20ee380ca59c5a8646750c4849969a815924e2e
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.15
Status affected
Version 0
Version < 5.15
Status unaffected
Version <= 5.15.*
Version 5.15.221
Status unaffected
Version <= 6.1.*
Version 6.1.188
Status unaffected
Version <= 6.6.*
Version 6.6.157
Status unaffected
Version <= 6.12.*
Version 6.12.110
Status unaffected
Version <= 6.18.*
Version 6.18.51
Status unaffected
Version <= 7.2.*
Version 7.2.5
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.67% 0.505
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/e479e9b148456905d12711411484b94083c8ff58
https://git.kernel.org/stable/c/2191b0034a2f1307d421782e6eceddf8eec9e7f6
https://git.kernel.org/stable/c/de0c8ef3b900c5e971c82ef38c6f5c22c5f3d8c1
https://git.kernel.org/stable/c/96eb8a3fc9f7fe7ba32679fcf1d2fd7d251e7a8b
https://git.kernel.org/stable/c/94bfb61478bcb207d27f8cd24fd231421059519f
https://git.kernel.org/stable/c/75fd6d041c4a325ae37f4683e6678d3015988bb0
https://git.kernel.org/stable/c/c20ee380ca59c5a8646750c4849969a815924e2e