CVE-2024-36952— scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
Affected Version Matrix 12
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | 92d7f7b0cde3ad2260e7462b40867b57efd49851< f2c7f029051edc4b394bb48edbe2297575abefe0 | affected |
92d7f7b0cde3ad2260e7462b40867b57efd49851< 0936809d968ecf81e0726fbd02ff2a5732d960c3 | affected | ||
92d7f7b0cde3ad2260e7462b40867b57efd49851< 76337eb8daee32bcc67742efab3168ed4ca299d0 | affected | ||
92d7f7b0cde3ad2260e7462b40867b57efd49851< 718602cd15f4c5710850090ea3066a89eeb46278 | affected | ||
92d7f7b0cde3ad2260e7462b40867b57efd49851< 4ddf01f2f1504fa08b766e8cfeec558e9f8eef6c | affected | ||
2.6.23 | affected | ||
< 2.6.23 | unaffected | ||
5.15.159≤ 5.15.* | unaffected | ||
| … +4 more rows | |||
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-36952
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up There are cases after NPIV deletion where the fabric switch still believes the NPIV is logged into the fabric. This occurs when a vport is unregistered before the Remove All DA_ID CT and LOGO ELS are sent to the fabric. Currently fc_remove_host(), which calls dev_loss_tmo for all D_IDs including the fabric D_ID, removes the last ndlp reference and frees the ndlp rport object. This sometimes causes the race condition where the final DA_ID and LOGO are skipped from being sent to the fabric switch. Fix by moving the fc_remove_host() and scsi_remove_host() calls after DA_ID and LOGO are sent.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 存在安全漏洞，该漏洞源于 scsi:lpfc 模块将 NPIV 的传输取消注册移至资源清理之后。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2024-36952
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-36952
请登录查看更多情报信息。
Same Patch Batch · Linux · 2024-05-30 · 93 CVEs total
| CVE-2024-36925 | swiotlb: initialise restricted pool list_head when SWIOTLB_DYNAMIC=y | |
| CVE-2024-36921 | wifi: iwlwifi: mvm: guard against invalid STA ID on removal | |
| CVE-2024-36918 | bpf: Check bloom filter map value size | |
| CVE-2024-36917 | block: fix overflow in blk_ioctl_discard() | |
| CVE-2024-36914 | drm/amd/display: Skip on writeback when it's not applicable | |
| CVE-2024-36915 | nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies | |
| CVE-2024-36913 | Drivers: hv: vmbus: Leak pages if set_memory_encrypted() fails | |
| CVE-2024-36912 | Drivers: hv: vmbus: Track decrypted status in vmbus_gpadl | |
| CVE-2024-36916 | blk-iocost: avoid out of bounds shift | |
| CVE-2024-36924 | scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() | |
| CVE-2024-36922 | wifi: iwlwifi: read txq->read_ptr under lock | |
| CVE-2024-36927 | ipv4: Fix uninit-value access in __ip_make_skb() | |
| CVE-2024-36926 | powerpc/pseries/iommu: LPAR panics during boot up with a frozen PE | |
| CVE-2024-36928 | s390/qeth: Fix kernel panic after setting hsuid | |
| CVE-2024-36929 | net: core: reject skb_copy(_expand) for fraglist GSO skbs | |
| CVE-2024-36930 | spi: fix null pointer dereference within spi_sync | |
| CVE-2024-36932 | thermal/debugfs: Prevent use-after-free from occurring after cdev removal | |
| CVE-2024-36931 | s390/cio: Ensure the copied buf is NUL terminated | |
| CVE-2024-36933 | nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). | |
| CVE-2024-36934 | bna: ensure the copied buf is NUL terminated |
Showing top 20 of 93 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Linux
- CVE-2026-46333
ptrace: slightly saner 'get_dumpable()' logic - CVE-2026-43490
ksmbd: validate inherited ACE SID length - CVE-2026-43489
liveupdate: luo_file: remember retrieve() status - CVE-2026-43487
ata: libata-core: Disable LPM on ST1000DM010-2EP102 - CVE-2026-43488
usb: xhci: Prevent interrupt storm on host controller error
Same vendor: Linux
- CVE-2026-46333
ptrace: slightly saner 'get_dumpable()' logic - CVE-2026-43490
ksmbd: validate inherited ACE SID length - CVE-2026-43489
liveupdate: luo_file: remember retrieve() status - CVE-2026-43487
ata: libata-core: Disable LPM on ST1000DM010-2EP102 - CVE-2026-43488
usb: xhci: Prevent interrupt storm on host controller error
V. Comments for CVE-2024-36952
No comments yet