{ "cveId": "CVE-2024-42286", "url": "https://patchblox.com/security/cve/CVE-2024-42286", "summary": "CVE-2024-42286 is fixed in 40 products on 1 platform, first by DEBIAN-CVE-2024-42286, released August 17, 2024. It is not reported as exploited. Patch Radar priority: Routine.", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: validate nvme_local_port correctl...", "description": "In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: validate nvme_local_port correctly The driver load failed with error message, qla2xxx [0000:04:00.0]-ffff:0: register_localport failed: ret=ffffffef and with a kernel crash, \tBUG: unable to handle kernel NULL pointer dereference at 0000000000000070 \tWorkqueue: events_unbound qla_register_fcport_fn [qla2xxx] \tRIP: 0010:nvme_fc_register_remoteport\u002B0x16/0x430 [nvme_fc] \tRSP: 0018:ffffaaa040eb3d98 EFLAGS: 00010282 \tRAX: 0000000000000000 RBX: ffff9dfb46b78c00 RCX: 0000000000000000 \tRDX: ffff9dfb46b78da8 RSI: ffffaaa040eb3e08 RDI: 0000000000000000 \tRBP: ffff9dfb612a0a58 R08: ffffffffaf1d6270 R09: 3a34303a30303030 \tR10: 34303a303030305b R11: 2078787832616c71 R12: ffff9dfb46b78dd4 \tR13: ffff9dfb46b78c24 R14: ffff9dfb41525300 R15: ffff9dfb46b78da8 \tFS: 0000000000000000(0000) GS:ffff9dfc67c00000(0000) knlGS:0000000000000000 \tCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 \tCR2: 0000000000000070 CR3: 000000018da10004 CR4: 00000000000206f0 \tCall Trace: \tqla_nvme_register_remote\u002B0xeb/0x1f0 [qla2xxx] \t? qla2x00_dfs_create_rport\u002B0x231/0x270 [qla2xxx] \tqla2x00_update_fcport\u002B0x2a1/0x3c0 [qla2xxx] \tqla_register_fcport_fn\u002B0x54/0xc0 [qla2xxx] Exit the qla_nvme_register_remote() function when qla_nvme_register_hba() fails and correctly validate nvme_local_port.", "published": "2024-08-17T09:15:09Z", "severity": "medium", "cvss": 5.5, "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "epss": 0.00885, "epssPercentile": 0.59473, "priority": "Routine", "priorityTier": 4, "exploited": false, "vendorExploited": false, "disclosed": false, "fixes": [ { "platform": "linux", "product": "bpftool", "release": "ol 8", "fixedVersion": "0:5.15.0-300.163.18.el9uek", "fix": "ELSA-2024-12682", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12682", "released": "2024-09-23T00:00:00Z" }, { "platform": "linux", "product": "bpftool", "release": "ol 9", "fixedVersion": "0:5.15.0-300.163.18.el9uek", "fix": "ELSA-2024-12682", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12682", "released": "2024-09-23T00:00:00Z" }, { "platform": "linux", "product": "dtb-aarch64", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-64kb", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-64kb", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-azure", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.8.11.1", "fix": "SUSE-SU-2024:3194-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3194-1", "released": "2024-09-10T09:06:25Z" }, { "platform": "linux", "product": "kernel-azure", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.8.11.1", "fix": "SUSE-SU-2024:3194-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3194-1", "released": "2024-09-10T09:06:25Z" }, { "platform": "linux", "product": "kernel-debug", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-default", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-default", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-default-base", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.22.1.150600.12.8.3", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-default-base", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.22.1.150600.12.8.3", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-docs", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-docs", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-kvmsmall", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-livepatch-SLE15-SP6-RT_Update_2", "release": "sles 15.6", "fixedVersion": "1-150600.1.3.2", "fix": "SUSE-SU-2024:3195-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3195-1", "released": "2024-09-10T14:10:24Z" }, { "platform": "linux", "product": "kernel-livepatch-SLE15-SP6_Update_4", "release": "sles 15.6", "fixedVersion": "1-150600.13.3.3", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-obs-build", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-obs-build", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-obs-qa", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-rt", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.10.8.3", "fix": "SUSE-SU-2024:3195-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3195-1", "released": "2024-09-10T14:10:24Z" }, { "platform": "linux", "product": "kernel-rt_debug", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.10.8.3", "fix": "SUSE-SU-2024:3195-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3195-1", "released": "2024-09-10T14:10:24Z" }, { "platform": "linux", "product": "kernel-source", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-source", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-source-azure", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.8.11.1", "fix": "SUSE-SU-2024:3194-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3194-1", "released": "2024-09-10T09:06:25Z" }, { "platform": "linux", "product": "kernel-source-azure", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.8.11.1", "fix": "SUSE-SU-2024:3194-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3194-1", "released": "2024-09-10T09:06:25Z" }, { "platform": "linux", "product": "kernel-source-rt", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.10.8.3", "fix": "SUSE-SU-2024:3195-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3195-1", "released": "2024-09-10T14:10:24Z" }, { "platform": "linux", "product": "kernel-syms", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-syms", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-syms-azure", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.8.11.1", "fix": "SUSE-SU-2024:3194-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3194-1", "released": "2024-09-10T09:06:25Z" }, { "platform": "linux", "product": "kernel-syms-azure", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.8.11.1", "fix": "SUSE-SU-2024:3194-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3194-1", "released": "2024-09-10T09:06:25Z" }, { "platform": "linux", "product": "kernel-syms-rt", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.10.8.1", "fix": "SUSE-SU-2024:3195-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3195-1", "released": "2024-09-10T14:10:24Z" }, { "platform": "linux", "product": "kernel-uek", "release": "ol 8", "fixedVersion": "0:5.15.0-300.163.18.el9uek", "fix": "ELSA-2024-12682", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12682", "released": "2024-09-23T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek", "release": "ol 9", "fixedVersion": "0:5.15.0-300.163.18.el9uek", "fix": "ELSA-2024-12682", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12682", "released": "2024-09-23T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-container", "release": "ol 8", "fixedVersion": "0:5.15.0-300.163.18.el9uek", "fix": "ELSA-2024-12682", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12682", "released": "2024-09-23T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-container", "release": "ol 9", "fixedVersion": "0:5.15.0-300.163.18.el9uek", "fix": "ELSA-2024-12682", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12682", "released": "2024-09-23T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-container-debug", "release": "ol 8", "fixedVersion": "0:5.15.0-300.163.18.el9uek", "fix": "ELSA-2024-12682", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12682", "released": "2024-09-23T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-container-debug", "release": "ol 9", "fixedVersion": "0:5.15.0-300.163.18.el9uek", "fix": "ELSA-2024-12682", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12682", "released": "2024-09-23T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-core", "release": "ol 8", "fixedVersion": "0:5.15.0-300.163.18.el9uek", "fix": "ELSA-2024-12682", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12682", "released": "2024-09-23T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-core", "release": "ol 9", "fixedVersion": "0:5.15.0-300.163.18.el9uek", "fix": "ELSA-2024-12682", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12682", "released": "2024-09-23T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug", "release": "ol 8", "fixedVersion": "0:5.15.0-300.163.18.el9uek", "fix": "ELSA-2024-12682", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12682", "released": "2024-09-23T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug", "release": "ol 9", "fixedVersion": "0:5.15.0-300.163.18.el9uek", "fix": "ELSA-2024-12682", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12682", "released": "2024-09-23T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-core", "release": "ol 8", "fixedVersion": "0:5.15.0-300.163.18.el9uek", "fix": "ELSA-2024-12682", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12682", "released": "2024-09-23T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-core", "release": "ol 9", "fixedVersion": "0:5.15.0-300.163.18.el9uek", "fix": "ELSA-2024-12682", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12682", "released": "2024-09-23T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-devel", "release": "ol 8", "fixedVersion": "0:5.15.0-300.163.18.el9uek", "fix": "ELSA-2024-12682", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12682", "released": "2024-09-23T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-devel", "release": "ol 9", "fixedVersion": "0:5.15.0-300.163.18.el9uek", "fix": "ELSA-2024-12682", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12682", "released": "2024-09-23T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules", "release": "ol 8", "fixedVersion": "0:5.15.0-300.163.18.el9uek", "fix": "ELSA-2024-12682", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12682", "released": "2024-09-23T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules", "release": "ol 9", "fixedVersion": "0:5.15.0-300.163.18.el9uek", "fix": "ELSA-2024-12682", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12682", "released": "2024-09-23T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-extra", "release": "ol 8", "fixedVersion": "0:5.15.0-300.163.18.el9uek", "fix": "ELSA-2024-12682", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12682", "released": "2024-09-23T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-extra", "release": "ol 9", "fixedVersion": "0:5.15.0-300.163.18.el9uek", "fix": "ELSA-2024-12682", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12682", "released": "2024-09-23T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-devel", "release": "ol 8", "fixedVersion": "0:5.15.0-300.163.18.el9uek", "fix": "ELSA-2024-12682", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12682", "released": "2024-09-23T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-devel", "release": "ol 9", "fixedVersion": "0:5.15.0-300.163.18.el9uek", "fix": "ELSA-2024-12682", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12682", "released": "2024-09-23T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-doc", "release": "ol 8", "fixedVersion": "0:5.15.0-300.163.18.el9uek", "fix": "ELSA-2024-12682", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12682", "released": "2024-09-23T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-doc", "release": "ol 9", "fixedVersion": "0:5.15.0-300.163.18.el9uek", "fix": "ELSA-2024-12682", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12682", "released": "2024-09-23T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules", "release": "ol 8", "fixedVersion": "0:5.15.0-300.163.18.el9uek", "fix": "ELSA-2024-12682", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12682", "released": "2024-09-23T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules", "release": "ol 9", "fixedVersion": "0:5.15.0-300.163.18.el9uek", "fix": "ELSA-2024-12682", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12682", "released": "2024-09-23T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-extra", "release": "ol 8", "fixedVersion": "0:5.15.0-300.163.18.el9uek", "fix": "ELSA-2024-12682", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12682", "released": "2024-09-23T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-extra", "release": "ol 9", "fixedVersion": "0:5.15.0-300.163.18.el9uek", "fix": "ELSA-2024-12682", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12682", "released": "2024-09-23T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-tools", "release": "ol 8", "fixedVersion": "0:5.4.17-2136.336.5.1.el7uek", "fix": "ELSA-2024-12780", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12780", "released": "2024-10-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-tools-libs", "release": "ol 8", "fixedVersion": "0:5.4.17-2136.336.5.1.el7uek", "fix": "ELSA-2024-12780", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12780", "released": "2024-10-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-zfcpdump", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-zfcpdump", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "linux", "release": "Debian 12.15 (bookworm)", "fixedVersion": "6.1.106-1", "fix": "DEBIAN-CVE-2024-42286", "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-42286", "released": "2024-08-17T09:15:09Z" }, { "platform": "linux", "product": "linux", "release": "Debian 13.5 (trixie)", "fixedVersion": "6.10.3-1", "fix": "DEBIAN-CVE-2024-42286", "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-42286", "released": "2024-08-17T09:15:09Z" }, { "platform": "linux", "product": "linux", "release": "Debian 14", "fixedVersion": "6.10.3-1", "fix": "DEBIAN-CVE-2024-42286", "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-42286", "released": "2024-08-17T09:15:09Z" }, { "platform": "linux", "product": "perf", "release": "ol 8", "fixedVersion": "0:5.4.17-2136.336.5.1.el7uek", "fix": "ELSA-2024-12780", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12780", "released": "2024-10-11T00:00:00Z" }, { "platform": "linux", "product": "python-perf", "release": "ol 8", "fixedVersion": "0:5.4.17-2136.336.5.1.el7uek", "fix": "ELSA-2024-12780", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12780", "released": "2024-10-11T00:00:00Z" } ], "noFixYet": [], "dataAsOf": "2026-11-08T13:06:02Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }