CVE-2024-26929

Updated: 2025-02-07 20:17:08.634151

Description:

A flaw was found in the qla2xxx module in the Linux kernel. Under some conditions, the fcport can be freed twice due to a missing check of whether fcport is allocated, causing a double free and a system crash, resulting in a denial of service.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x NONE 0
CVSS Version 3.x MEDIUM 5.5

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

AlmaLinux 9.2 ESU kernel 5.14.0 5.5 MEDIUM Released CLSA-2025:1743193221 2024-06-24 11:21:16
CentOS 6 ELS kernel 2.6.32 5.5 MEDIUM Not Vulnerable 2024-07-31 14:33:56
CentOS 7 ELS kernel 3.10.0 5.5 MEDIUM Not Vulnerable 2024-08-27 12:26:00
CentOS 8.4 ELS kernel 4.18.0 5.5 MEDIUM Released CLSA-2024:1719932549 2024-07-02 11:12:56
CentOS 8.5 ELS kernel 4.18.0 5.5 MEDIUM Released CLSA-2024:1719933179 2024-07-02 14:28:02
CentOS Stream 8 ELS kernel 4.18.0 5.5 MEDIUM Released 2024-11-11 04:55:53
CloudLinux 6 ELS kernel 2.6.32 5.5 MEDIUM Not Vulnerable 2024-07-31 14:33:56
CloudLinux 7 ELS kernel 3.10.0 5.5 MEDIUM Ignored 2025-01-11 02:42:18
Oracle Linux 6 ELS kernel 2.6.32 5.5 MEDIUM Not Vulnerable 2024-07-31 14:33:56
Oracle Linux 7 ELS kernel 3.10.0 5.5 MEDIUM Ignored 2025-01-28 02:30:21
Total: 13