# CVE-2024-42287: linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: qla2xxx: Complete command early within loc...

CVE-2024-42287 is fixed in 40 products on 1 platform, first by DEBIAN-CVE-2024-42287, released August 17, 2024. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2024-42287
- Priority: Routine
- CVSS: 4.7 (medium)
- EPSS: 0.0034
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Aug 17, 2024

## Description

In the Linux kernel, the following vulnerability has been resolved:  scsi: qla2xxx: Complete command early within lock  A crash was observed while performing NPIV and FW reset,   BUG: kernel NULL pointer dereference, address: 000000000000001c  #PF: supervisor read access in kernel mode  #PF: error_code(0x0000) - not-present page  PGD 0 P4D 0  Oops: 0000 1 PREEMPT_RT SMP NOPTI  RIP: 0010:dma_direct_unmap_sg+0x51/0x1e0  RSP: 0018:ffffc90026f47b88 EFLAGS: 00010246  RAX: 0000000000000000 RBX: 0000000000000021 RCX: 0000000000000002  RDX: 0000000000000021 RSI: 0000000000000000 RDI: ffff8881041130d0  RBP: ffff8881041130d0 R08: 0000000000000000 R09: 0000000000000034  R10: ffffc90026f47c48 R11: 0000000000000031 R12: 0000000000000000  R13: 0000000000000000 R14: ffff8881565e4a20 R15: 0000000000000000  FS: 00007f4c69ed3d00(0000) GS:ffff889faac80000(0000) knlGS:0000000000000000  CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033  CR2: 000000000000001c CR3: 0000000288a50002 CR4: 00000000007706e0  DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000  DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400  PKRU: 55555554  Call Trace:  <TASK>  ? __die_body+0x1a/0x60  ? page_fault_oops+0x16f/0x4a0  ? do_user_addr_fault+0x174/0x7f0  ? exc_page_fault+0x69/0x1a0  ? asm_exc_page_fault+0x22/0x30  ? dma_direct_unmap_sg+0x51/0x1e0  ? preempt_count_sub+0x96/0xe0  qla2xxx_qpair_sp_free_dma+0x29f/0x3b0 [qla2xxx]  qla2xxx_qpair_sp_compl+0x60/0x80 [qla2xxx]  __qla2x00_abort_all_cmds+0xa2/0x450 [qla2xxx]  The command completion was done early while aborting the commands in driver unload path but outside lock to avoid the WARN_ON condition of performing dma_free_attr within the lock. However this caused race condition while command completion via multiple paths causing system crash.  Hence complete the command early in unload path but within the lock to avoid race condition.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | bpftool ol 8 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | bpftool ol 9 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | dtb-aarch64 opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | kernel-64kb opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | kernel-64kb sles 15.6 | 6.4.0-150600.23.22.1 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | kernel-azure opensuse-leap 15.6 | 6.4.0-150600.8.11.1 | [SUSE-SU-2024:3194-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3194-1.md) | Sep 10, 2024 |
| Linux | kernel-azure sles 15.6 | 6.4.0-150600.8.11.1 | [SUSE-SU-2024:3194-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3194-1.md) | Sep 10, 2024 |
| Linux | kernel-debug opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | kernel-default opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | kernel-default sles 15.6 | 6.4.0-150600.23.22.1 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | kernel-default-base opensuse-leap 15.6 | 6.4.0-150600.23.22.1.150600.12.8.3 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | kernel-default-base sles 15.6 | 6.4.0-150600.23.22.1.150600.12.8.3 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | kernel-docs opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | kernel-docs sles 15.6 | 6.4.0-150600.23.22.1 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | kernel-kvmsmall opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | kernel-livepatch-SLE15-SP6-RT_Update_2 sles 15.6 | 1-150600.1.3.2 | [SUSE-SU-2024:3195-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3195-1.md) | Sep 10, 2024 |
| Linux | kernel-livepatch-SLE15-SP6_Update_4 sles 15.6 | 1-150600.13.3.3 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | kernel-obs-build opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | kernel-obs-build sles 15.6 | 6.4.0-150600.23.22.1 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | kernel-obs-qa opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | kernel-rt opensuse-leap 15.6 | 6.4.0-150600.10.8.3 | [SUSE-SU-2024:3195-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3195-1.md) | Sep 10, 2024 |
| Linux | kernel-rt_debug opensuse-leap 15.6 | 6.4.0-150600.10.8.3 | [SUSE-SU-2024:3195-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3195-1.md) | Sep 10, 2024 |
| Linux | kernel-source opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | kernel-source sles 15.6 | 6.4.0-150600.23.22.1 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | kernel-source-azure opensuse-leap 15.6 | 6.4.0-150600.8.11.1 | [SUSE-SU-2024:3194-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3194-1.md) | Sep 10, 2024 |
| Linux | kernel-source-azure sles 15.6 | 6.4.0-150600.8.11.1 | [SUSE-SU-2024:3194-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3194-1.md) | Sep 10, 2024 |
| Linux | kernel-source-rt opensuse-leap 15.6 | 6.4.0-150600.10.8.3 | [SUSE-SU-2024:3195-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3195-1.md) | Sep 10, 2024 |
| Linux | kernel-syms opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | kernel-syms sles 15.6 | 6.4.0-150600.23.22.1 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | kernel-syms-azure opensuse-leap 15.6 | 6.4.0-150600.8.11.1 | [SUSE-SU-2024:3194-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3194-1.md) | Sep 10, 2024 |
| Linux | kernel-syms-azure sles 15.6 | 6.4.0-150600.8.11.1 | [SUSE-SU-2024:3194-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3194-1.md) | Sep 10, 2024 |
| Linux | kernel-syms-rt opensuse-leap 15.6 | 6.4.0-150600.10.8.1 | [SUSE-SU-2024:3195-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3195-1.md) | Sep 10, 2024 |
| Linux | kernel-uek ol 8 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek ol 9 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-container ol 8 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-container ol 9 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-container-debug ol 8 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-container-debug ol 9 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-core ol 8 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-core ol 9 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-debug ol 8 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-debug ol 9 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-debug-core ol 8 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-debug-core ol 9 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-debug-devel ol 8 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-debug-devel ol 9 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-debug-modules ol 8 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-debug-modules ol 9 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-debug-modules-extra ol 8 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-debug-modules-extra ol 9 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-devel ol 8 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-devel ol 9 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-doc ol 8 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-doc ol 9 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-modules ol 8 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-modules ol 9 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-modules-extra ol 8 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-modules-extra ol 9 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-tools ol 8 | 0:5.4.17-2136.336.5.1.el7uek | [ELSA-2024-12780](https://patchblox.com/security/data/fix/linux/elsa-2024-12780.md) | Oct 11, 2024 |
| Linux | kernel-uek-tools-libs ol 8 | 0:5.4.17-2136.336.5.1.el7uek | [ELSA-2024-12780](https://patchblox.com/security/data/fix/linux/elsa-2024-12780.md) | Oct 11, 2024 |
| Linux | kernel-zfcpdump opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | kernel-zfcpdump sles 15.6 | 6.4.0-150600.23.22.1 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | linux Debian 12.15 (bookworm) | 6.1.106-1 | [DEBIAN-CVE-2024-42287](https://patchblox.com/security/data/fix/linux/debian-cve-2024-42287.md) | Aug 17, 2024 |
| Linux | linux Debian 13.5 (trixie) | 6.10.3-1 | [DEBIAN-CVE-2024-42287](https://patchblox.com/security/data/fix/linux/debian-cve-2024-42287.md) | Aug 17, 2024 |
| Linux | linux Debian 14 | 6.10.3-1 | [DEBIAN-CVE-2024-42287](https://patchblox.com/security/data/fix/linux/debian-cve-2024-42287.md) | Aug 17, 2024 |
| Linux | perf ol 8 | 0:5.4.17-2136.336.5.1.el7uek | [ELSA-2024-12780](https://patchblox.com/security/data/fix/linux/elsa-2024-12780.md) | Oct 11, 2024 |
| Linux | python-perf ol 8 | 0:5.4.17-2136.336.5.1.el7uek | [ELSA-2024-12780](https://patchblox.com/security/data/fix/linux/elsa-2024-12780.md) | Oct 11, 2024 |

---

Data as of 2026-11-08T13:06:02Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.