< Back

CVE-2024-56623

Updated on 27 Dec 2024

Severity

5.5 Medium severity

Details

CVSS score: 5.5
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE ID: CWE-416 Use After Free
Affected product
Affected component
Links: NIST CIRCL RHEL Ubuntu

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Fix use after free on unload

System crash is observed with stack trace warning of use after free. There are 2 signals to tell dpc_thread to terminate (UNLOADING flag and kthread_stop).

On setting the UNLOADING flag when dpc_thread happens to run at the time and sees the flag, this causes dpc_thread to exit and clean up itself. When kthread_stop is called for final cleanup, this causes use after free.

Remove UNLOADING signal to terminate dpc_thread. Use the kthread_stop as the main signal to exit dpc_thread.

[596663.812935] kernel BUG at mm/slub.c:294! [596663.812950] invalid opcode: 0000 [#1] SMP PTI [596663.812957] CPU: 13 PID: 1475935 Comm: rmmod Kdump: loaded Tainted: G IOE ——— - - 4.18.0-240.el8.x86_64 #1 [596663.812960] Hardware name: HP ProLiant DL380p Gen8, BIOS P70 08/20/2012 [596663.812974] RIP: 0010:__slab_free+0x17d/0x360

… [596663.813008] Call Trace: [596663.813022] ? __dentry_kill+0x121/0x170 [596663.813030] ? _cond_resched+0x15/0x30 [596663.813034] ? _cond_resched+0x15/0x30 [596663.813039] ? wait_for_completion+0x35/0x190 [596663.813048] ? try_to_wake_up+0x63/0x540 [596663.813055] free_task+0x5a/0x60 [596663.813061] kthread_stop+0xf3/0x100 [596663.813103] qla2x00_remove_one+0x284/0x440 [qla2xxx]

Details

Affected product:: AlmaLinux 9.2 ESU , Amazon Linux 2 ELS , CentOS 6 ELS , CentOS 7 ELS , CentOS 8.4 ELS , CentOS 8.5 ELS , CentOS Stream 8 ELS , CloudLinux 6 ELS , CloudLinux 7 ELS , Debian 10 ELS , Oracle Linux 6 ELS , Oracle Linux 7 ELS , RHEL 7 ELS , TuxCare 9.6 ESU , Ubuntu 16.04 ELS , Ubuntu 18.04 ELS , Ubuntu 20.04 ELS
Affected packages:: kernel @ 3.10.0 (+19 more)

Fixes

Operating system / Project

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system	Status	Covered kernels
AlmaLinux 9	Will Not Fix	50 kernels 5.14.0-162.6.1.el9_1 5.14.0-70.26.1.el9_0 5.14.0-70.30.1.el9_0 5.14.0-70.17.1.el9_0 5.14.0-70.22.1.el9_0 5.14.0-162.12.1.el9_1 5.14.0-162.18.1.el9_1 5.14.0-162.22.2.el9_1 5.14.0-162.23.1.el9_1 5.14.0-284.11.1.el9_2 5.14.0-284.18.1.el9_2 5.14.0-70.13.1.el9_0 5.14.0-284.25.1.el9_2 5.14.0-284.30.1.el9_2 5.14.0-362.8.1.el9_3 5.14.0-362.13.1.el9_3 5.14.0-362.18.1.el9_3 5.14.0-362.24.1.el9_3 5.14.0-427.13.1.el9_4 5.14.0-427.16.1.el9_4 5.14.0-362.24.2.el9_3 5.14.0-427.18.1.el9_4 5.14.0-427.20.1.el9_4 5.14.0-427.24.1.el9_4 5.14.0-427.26.1.el9_4 5.14.0-427.28.1.el9_4 5.14.0-427.22.1.el9_4 5.14.0-427.31.1.el9_4 5.14.0-427.33.1.el9_4 5.14.0-427.35.1.el9_4 5.14.0-427.37.1.el9_4 5.14.0-427.40.1.el9_4 5.14.0-427.42.1.el9_4 5.14.0-503.11.1.el9_5 5.14.0-503.14.1.el9_5 5.14.0-503.15.1.el9_5 5.14.0-503.16.1.el9_5 5.14.0-503.19.1.el9_5 5.14.0-503.21.1.el9_5 5.14.0-503.22.1.el9_5 5.14.0-503.23.2.el9_5 5.14.0-503.26.1.el9_5 5.14.0-503.23.1.el9_5 5.14.0-503.31.1.el9_5 5.14.0-503.34.1.el9_5 5.14.0-503.29.1.el9_5 5.14.0-503.35.1.el9_5 5.14.0-503.33.1.el9_5 5.14.0-503.38.1.el9_5 5.14.0-503.40.1.el9_5
AlmaLinux 9.2 ESU	Planned	—
Amazon Linux 2 5.10	Will Not Fix	—
Debian 11	Planned	—
Debian 11 cloud	Planned	—
Debian 12	Planned	—
Oracle Linux 8 UEK 7	Will Not Fix	53 kernels 5.15.0-102.110.5.el8uek 5.15.0-101.103.2.1.el8uek 5.15.0-8.91.4.1.el8uek 5.15.0-7.86.6.1.el8uek 5.15.0-2.52.3.el8uek 5.15.0-100.96.32.el8uek 5.15.0-5.76.5.1.el8uek 5.15.0-6.80.3.1.el8uek 5.15.0-3.60.5.1.el8uek 5.15.0-0.30.20.el8uek 5.15.0-1.43.4.1.el8uek 5.15.0-0.30.20.1.el8uek 5.15.0-1.43.4.2.el8uek 5.15.0-4.70.5.2.el8uek 5.15.0-104.119.4.2.el8uek 5.15.0-0.30.19.el8uek 5.15.0-105.125.6.2.el8uek 5.15.0-105.125.6.2.1.el8uek 5.15.0-105.125.6.2.2.el8uek 5.15.0-106.131.4.el8uek 5.15.0-200.131.27.el8uek 5.15.0-200.131.27.1.el8uek 5.15.0-201.135.6.el8uek 5.15.0-202.135.2.el8uek 5.15.0-102.110.5.1.el8uek 5.15.0-103.114.4.el8uek 5.15.0-203.146.5.1.el8uek 5.15.0-204.147.6.2.el8uek 5.15.0-204.147.6.3.el8uek 5.15.0-205.149.5.1.el8uek 5.15.0-205.149.5.4.el8uek 5.15.0-206.153.7.el8uek 5.15.0-206.153.7.1.el8uek 5.15.0-207.156.6.el8uek 5.15.0-208.159.3.el8uek 5.15.0-208.159.3.2.el8uek 5.15.0-209.161.7.el8uek 5.15.0-209.161.7.1.el8uek 5.15.0-209.161.7.2.el8uek 5.15.0-210.163.7.el8uek 5.15.0-300.163.18.el8uek 5.15.0-300.163.18.1.el8uek 5.15.0-300.163.18.1.1.el8uek 5.15.0-301.163.5.2.el8uek 5.15.0-302.167.6.el8uek 5.15.0-300.163.18.7.el8uek 5.15.0-302.167.6.1.el8uek 5.15.0-303.171.5.2.el8uek 5.15.0-303.171.5.2.1.el8uek 5.15.0-304.171.4.el8uek 5.15.0-304.171.4.1.el8uek 5.15.0-304.171.4.3.el8uek 5.15.0-303.171.5.2.2.el8uek
Oracle Linux 9	Will Not Fix	56 kernels 5.14.0-70.13.1.0.3.el9_0 5.14.0-70.17.1.0.1.el9_0 5.14.0-70.22.1.0.1.el9_0 5.14.0-70.26.1.0.1.el9_0 5.14.0-162.6.1.el9_1 5.14.0-284.11.1.el9_2 5.14.0-162.23.1.el9_1 5.14.0-162.22.2.el9_1 5.14.0-162.18.1.el9_1 5.14.0-162.12.1.el9_1 5.14.0-70.30.1.0.1.el9_0 5.14.0-284.18.1.el9_2 5.14.0-284.25.1.el9_2 5.14.0-284.25.1.0.1.el9_2 5.14.0-284.30.0.1.el9_2 5.14.0-284.30.1.el9_2 5.14.0-362.8.1.el9_3 5.14.0-362.13.0.1.el9_3 5.14.0-362.13.1.el9_3 5.14.0-362.18.0.1.el9_3 5.14.0-362.18.0.2.el9_3 5.14.0-362.18.1.el9_3 5.14.0-362.24.1.el9_3 5.14.0-362.24.1.0.1.el9_3 5.14.0-427.13.1.el9_4 5.14.0-427.16.1.el9_4 5.14.0-362.24.1.0.2.el9_3 5.14.0-427.18.1.el9_4 5.14.0-427.20.1.el9_4 5.14.0-427.22.1.el9_4 5.14.0-427.24.1.el9_4 5.14.0-427.26.1.el9_4 5.14.0-427.28.1.el9_4 5.14.0-427.31.1.el9_4 5.14.0-427.33.1.el9_4 5.14.0-427.35.1.el9_4 5.14.0-427.37.1.el9_4 5.14.0-427.40.1.el9_4 5.14.0-427.42.1.el9_4 5.14.0-503.11.1.el9_5 5.14.0-503.14.1.el9_5 5.14.0-503.15.1.el9_5 5.14.0-503.16.1.el9_5 5.14.0-503.19.1.el9_5 5.14.0-503.21.1.el9_5 5.14.0-503.22.1.el9_5 5.14.0-503.23.1.el9_5 5.14.0-503.23.2.el9_5 5.14.0-503.26.1.el9_5 5.14.0-503.31.1.el9_5 5.14.0-503.29.1.el9_5 5.14.0-503.33.1.el9_5 5.14.0-503.34.1.el9_5 5.14.0-503.35.1.el9_5 5.14.0-503.38.1.el9_5 5.14.0-503.40.1.el9_5
Oracle Linux 9 UEK 7	Will Not Fix	53 kernels 5.15.0-101.103.2.1.el9uek 5.15.0-8.91.4.1.el9uek 5.15.0-7.86.6.1.el9uek 5.15.0-5.76.5.1.el9uek 5.15.0-6.80.3.1.el9uek 5.15.0-3.60.5.1.el9uek 5.15.0-0.30.20.el9uek 5.15.0-100.96.32.el9uek 5.15.0-1.43.4.2.el9uek 5.15.0-2.52.3.el9uek 5.15.0-4.70.5.2.el9uek 5.15.0-1.43.4.1.el9uek 5.15.0-0.30.20.1.el9uek 5.15.0-102.110.5.el9uek 5.15.0-102.110.5.1.el9uek 5.15.0-103.114.4.el9uek 5.15.0-104.119.4.2.el9uek 5.15.0-0.30.19.el9uek 5.15.0-105.125.6.2.el9uek 5.15.0-105.125.6.2.1.el9uek 5.15.0-105.125.6.2.2.el9uek 5.15.0-106.131.4.el9uek 5.15.0-200.131.27.el9uek 5.15.0-200.131.27.1.el9uek 5.15.0-201.135.6.el9uek 5.15.0-202.135.2.el9uek 5.15.0-203.146.5.1.el9uek 5.15.0-204.147.6.2.el9uek 5.15.0-204.147.6.3.el9uek 5.15.0-205.149.5.1.el9uek 5.15.0-205.149.5.4.el9uek 5.15.0-206.153.7.el9uek 5.15.0-206.153.7.1.el9uek 5.15.0-207.156.6.el9uek 5.15.0-208.159.3.el9uek 5.15.0-208.159.3.2.el9uek 5.15.0-209.161.7.el9uek 5.15.0-209.161.7.1.el9uek 5.15.0-209.161.7.2.el9uek 5.15.0-210.163.7.el9uek 5.15.0-300.163.18.el9uek 5.15.0-300.163.18.1.el9uek 5.15.0-300.163.18.1.1.el9uek 5.15.0-301.163.5.2.el9uek 5.15.0-302.167.6.el9uek 5.15.0-300.163.18.7.el9uek 5.15.0-302.167.6.1.el9uek 5.15.0-303.171.5.2.el9uek 5.15.0-303.171.5.2.1.el9uek 5.15.0-304.171.4.el9uek 5.15.0-304.171.4.1.el9uek 5.15.0-304.171.4.3.el9uek 5.15.0-303.171.5.2.2.el9uek
RHEL 9	Will Not Fix	50 kernels 5.14.0-70.17.1.el9_0 5.14.0-70.22.1.el9_0 5.14.0-70.5.1.el9_0 5.14.0-70.13.1.el9_0 5.14.0-70.26.1.el9_0 5.14.0-70.30.1.el9_0 5.14.0-162.6.1.el9_1 5.14.0-162.12.1.el9_1 5.14.0-162.18.1.el9_1 5.14.0-162.22.2.el9_1 5.14.0-162.23.1.el9_1 5.14.0-284.11.1.el9_2 5.14.0-284.18.1.el9_2 5.14.0-284.25.1.el9_2 5.14.0-284.30.1.el9_2 5.14.0-362.8.1.el9_3 5.14.0-362.13.1.el9_3 5.14.0-362.18.1.el9_3 5.14.0-362.24.1.el9_3 5.14.0-427.13.1.el9_4 5.14.0-427.16.1.el9_4 5.14.0-427.18.1.el9_4 5.14.0-427.20.1.el9_4 5.14.0-427.22.1.el9_4 5.14.0-427.24.1.el9_4 5.14.0-427.26.1.el9_4 5.14.0-427.28.1.el9_4 5.14.0-427.31.1.el9_4 5.14.0-427.33.1.el9_4 5.14.0-427.35.1.el9_4 5.14.0-427.37.1.el9_4 5.14.0-427.40.1.el9_4 5.14.0-427.42.1.el9_4 5.14.0-503.11.1.el9_5 5.14.0-503.14.1.el9_5 5.14.0-503.15.1.el9_5 5.14.0-503.16.1.el9_5 5.14.0-503.19.1.el9_5 5.14.0-503.21.1.el9_5 5.14.0-503.22.1.el9_5 5.14.0-503.23.1.el9_5 5.14.0-503.23.2.el9_5 5.14.0-503.26.1.el9_5 5.14.0-503.29.1.el9_5 5.14.0-503.31.1.el9_5 5.14.0-503.33.1.el9_5 5.14.0-503.34.1.el9_5 5.14.0-503.35.1.el9_5 5.14.0-503.38.1.el9_5 5.14.0-503.40.1.el9_5
Rocky Linux 9	Will Not Fix	49 kernels 5.14.0-162.6.1.el9_1 5.14.0-70.26.1.el9_0 5.14.0-70.30.1.el9_0 5.14.0-70.22.1.el9_0 5.14.0-162.6.1.el9_1.0.1 5.14.0-162.18.1.el9_1 5.14.0-162.12.1.el9_1.0.1 5.14.0-162.12.1.el9_1.0.2 5.14.0-162.22.2.el9_1 5.14.0-162.23.1.el9_1 5.14.0-284.11.1.el9_2 5.14.0-284.30.1.el9_2 5.14.0-362.8.1.el9_3 5.14.0-362.13.1.el9_3 5.14.0-362.18.1.el9_3 5.14.0-362.24.1.el9_3 5.14.0-362.18.1.el9_3.0.1 5.14.0-427.13.1.el9_4 5.14.0-427.16.1.el9_4 5.14.0-362.24.1.el9_3.0.1 5.14.0-427.18.1.el9_4 5.14.0-427.20.1.el9_4 5.14.0-427.24.1.el9_4 5.14.0-427.26.1.el9_4 5.14.0-427.28.1.el9_4 5.14.0-427.20.1.el9_4.0.1 5.14.0-427.22.1.el9_4 5.14.0-427.31.1.el9_4 5.14.0-427.33.1.el9_4 5.14.0-427.35.1.el9_4 5.14.0-427.37.1.el9_4 5.14.0-427.40.1.el9_4 5.14.0-427.42.1.el9_4 5.14.0-503.14.1.el9_5 5.14.0-503.15.1.el9_5 5.14.0-503.16.1.el9_5 5.14.0-503.19.1.el9_5 5.14.0-503.21.1.el9_5 5.14.0-503.22.1.el9_5 5.14.0-503.23.2.el9_5 5.14.0-503.26.1.el9_5 5.14.0-503.23.1.el9_5 5.14.0-503.31.1.el9_5 5.14.0-503.34.1.el9_5 5.14.0-503.29.1.el9_5 5.14.0-503.35.1.el9_5 5.14.0-503.33.1.el9_5 5.14.0-503.38.1.el9_5 5.14.0-503.40.1.el9_5
Ubuntu 24.04	Will Not Fix	20 kernels 6.8.0-35.35 6.8.0-38.38 6.8.0-36.36 6.8.0-39.39 6.8.0-40.40 6.8.0-41.41 6.8.0-44.44 6.8.0-45.45 6.8.0-31.31 6.8.0-47.47 6.8.0-48.48 6.8.0-49.49 6.8.0-50.51 6.8.0-51.52 6.8.0-52.53 6.8.0-54.56 6.8.0-55.57 6.8.0-53.55 6.8.0-56.58 6.8.0-57.59
Ubuntu 24.04 AWS	Ready For Release	—

Release info

Copy page link

Open as a page

Advisory

CLSA-2025:1748945064

Operating system

CentOS 8.4 ELS

Published date

Nov 16, 2014

Project

Linux

Version

2.11.0-1~ubuntu16.04.1+tuxcare.els12

How to fix

Update command:

apt-get update
apt-get --only-upgrade install ansible*

Changelog

Insufficiently Random Passwords Leakage
Debian/patches/CVE-2020-10729.patch: Fix caching of Jinja2 expressions to prevent caching dynamic results
CVE-2020-10729

Updated packages

ansible_2.5.1+dfsg-1ubuntu0.1+tuxcare.els6_all.deb

CVE-2024-56623

Severity

Details

Overview

About vulnerability

Details

Statement

Fixes

Statement

KernelCare state

Subscribe to updates

Unsubscribe

Contact us

Message Delivered!