# CVE-2024-42289: linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: qla2xxx: During vport delete send async lo...

CVE-2024-42289 is fixed in 40 products on 1 platform, first by DEBIAN-CVE-2024-42289, released August 17, 2024. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2024-42289
- Priority: Routine
- CVSS: 5.5 (medium)
- EPSS: 0.0024
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Aug 17, 2024

## Description

In the Linux kernel, the following vulnerability has been resolved:  scsi: qla2xxx: During vport delete send async logout explicitly  During vport delete, it is observed that during unload we hit a crash because of stale entries in outstanding command array.  For all these stale I/O entries, eh_abort was issued and aborted (fast_fail_io = 2009h) but I/Os could not complete while vport delete is in process of deleting.    BUG: kernel NULL pointer dereference, address: 000000000000001c   #PF: supervisor read access in kernel mode   #PF: error_code(0x0000) - not-present page   PGD 0 P4D 0   Oops: 0000 [#1] PREEMPT SMP NOPTI   Workqueue: qla2xxx_wq qla_do_work [qla2xxx]   RIP: 0010:dma_direct_unmap_sg+0x51/0x1e0   RSP: 0018:ffffa1e1e150fc68 EFLAGS: 00010046   RAX: 0000000000000000 RBX: 0000000000000021 RCX: 0000000000000001   RDX: 0000000000000021 RSI: 0000000000000000 RDI: ffff8ce208a7a0d0   RBP: ffff8ce208a7a0d0 R08: 0000000000000000 R09: ffff8ce378aac9c8   R10: ffff8ce378aac8a0 R11: ffffa1e1e150f9d8 R12: 0000000000000000   R13: 0000000000000000 R14: ffff8ce378aac9c8 R15: 0000000000000000   FS:  0000000000000000(0000) GS:ffff8d217f000000(0000) knlGS:0000000000000000   CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033   CR2: 000000000000001c CR3: 0000002089acc000 CR4: 0000000000350ee0   Call Trace:   <TASK>   qla2xxx_qpair_sp_free_dma+0x417/0x4e0   ? qla2xxx_qpair_sp_compl+0x10d/0x1a0   ? qla2x00_status_entry+0x768/0x2830   ? newidle_balance+0x2f0/0x430   ? dequeue_entity+0x100/0x3c0   ? qla24xx_process_response_queue+0x6a1/0x19e0   ? __schedule+0x2d5/0x1140   ? qla_do_work+0x47/0x60   ? process_one_work+0x267/0x440   ? process_one_work+0x440/0x440   ? worker_thread+0x2d/0x3d0   ? process_one_work+0x440/0x440   ? kthread+0x156/0x180   ? set_kthread_struct+0x50/0x50   ? ret_from_fork+0x22/0x30   </TASK>  Send out async logout explicitly for all the ports during vport delete.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | bpftool ol 8 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | bpftool ol 9 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | dtb-aarch64 opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | kernel-64kb opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | kernel-64kb sles 15.6 | 6.4.0-150600.23.22.1 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | kernel-azure opensuse-leap 15.6 | 6.4.0-150600.8.11.1 | [SUSE-SU-2024:3194-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3194-1.md) | Sep 10, 2024 |
| Linux | kernel-azure sles 15.6 | 6.4.0-150600.8.11.1 | [SUSE-SU-2024:3194-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3194-1.md) | Sep 10, 2024 |
| Linux | kernel-debug opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | kernel-default opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | kernel-default sles 15.6 | 6.4.0-150600.23.22.1 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | kernel-default-base opensuse-leap 15.6 | 6.4.0-150600.23.22.1.150600.12.8.3 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | kernel-default-base sles 15.6 | 6.4.0-150600.23.22.1.150600.12.8.3 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | kernel-docs opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | kernel-docs sles 15.6 | 6.4.0-150600.23.22.1 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | kernel-kvmsmall opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | kernel-livepatch-SLE15-SP6-RT_Update_2 sles 15.6 | 1-150600.1.3.2 | [SUSE-SU-2024:3195-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3195-1.md) | Sep 10, 2024 |
| Linux | kernel-livepatch-SLE15-SP6_Update_4 sles 15.6 | 1-150600.13.3.3 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | kernel-obs-build opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | kernel-obs-build sles 15.6 | 6.4.0-150600.23.22.1 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | kernel-obs-qa opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | kernel-rt opensuse-leap 15.6 | 6.4.0-150600.10.8.3 | [SUSE-SU-2024:3195-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3195-1.md) | Sep 10, 2024 |
| Linux | kernel-rt_debug opensuse-leap 15.6 | 6.4.0-150600.10.8.3 | [SUSE-SU-2024:3195-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3195-1.md) | Sep 10, 2024 |
| Linux | kernel-source opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | kernel-source sles 15.6 | 6.4.0-150600.23.22.1 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | kernel-source-azure opensuse-leap 15.6 | 6.4.0-150600.8.11.1 | [SUSE-SU-2024:3194-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3194-1.md) | Sep 10, 2024 |
| Linux | kernel-source-azure sles 15.6 | 6.4.0-150600.8.11.1 | [SUSE-SU-2024:3194-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3194-1.md) | Sep 10, 2024 |
| Linux | kernel-source-rt opensuse-leap 15.6 | 6.4.0-150600.10.8.3 | [SUSE-SU-2024:3195-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3195-1.md) | Sep 10, 2024 |
| Linux | kernel-syms opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | kernel-syms sles 15.6 | 6.4.0-150600.23.22.1 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | kernel-syms-azure opensuse-leap 15.6 | 6.4.0-150600.8.11.1 | [SUSE-SU-2024:3194-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3194-1.md) | Sep 10, 2024 |
| Linux | kernel-syms-azure sles 15.6 | 6.4.0-150600.8.11.1 | [SUSE-SU-2024:3194-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3194-1.md) | Sep 10, 2024 |
| Linux | kernel-syms-rt opensuse-leap 15.6 | 6.4.0-150600.10.8.1 | [SUSE-SU-2024:3195-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3195-1.md) | Sep 10, 2024 |
| Linux | kernel-uek ol 8 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek ol 9 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-container ol 8 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-container ol 9 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-container-debug ol 8 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-container-debug ol 9 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-core ol 8 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-core ol 9 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-debug ol 8 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-debug ol 9 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-debug-core ol 8 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-debug-core ol 9 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-debug-devel ol 8 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-debug-devel ol 9 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-debug-modules ol 8 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-debug-modules ol 9 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-debug-modules-extra ol 8 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-debug-modules-extra ol 9 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-devel ol 8 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-devel ol 9 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-doc ol 8 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-doc ol 9 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-modules ol 8 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-modules ol 9 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-modules-extra ol 8 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-modules-extra ol 9 | 0:5.15.0-300.163.18.el9uek | [ELSA-2024-12682](https://patchblox.com/security/data/fix/linux/elsa-2024-12682.md) | Sep 23, 2024 |
| Linux | kernel-uek-tools ol 8 | 0:5.4.17-2136.336.5.1.el7uek | [ELSA-2024-12780](https://patchblox.com/security/data/fix/linux/elsa-2024-12780.md) | Oct 11, 2024 |
| Linux | kernel-uek-tools-libs ol 8 | 0:5.4.17-2136.336.5.1.el7uek | [ELSA-2024-12780](https://patchblox.com/security/data/fix/linux/elsa-2024-12780.md) | Oct 11, 2024 |
| Linux | kernel-zfcpdump opensuse-leap 15.6 | 6.4.0-150600.23.22.1 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | kernel-zfcpdump sles 15.6 | 6.4.0-150600.23.22.1 | [SUSE-SU-2024:3383-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3383-1.md) | Sep 23, 2024 |
| Linux | linux Debian 12.15 (bookworm) | 6.1.106-1 | [DEBIAN-CVE-2024-42289](https://patchblox.com/security/data/fix/linux/debian-cve-2024-42289.md) | Aug 17, 2024 |
| Linux | linux Debian 13.5 (trixie) | 6.10.3-1 | [DEBIAN-CVE-2024-42289](https://patchblox.com/security/data/fix/linux/debian-cve-2024-42289.md) | Aug 17, 2024 |
| Linux | linux Debian 14 | 6.10.3-1 | [DEBIAN-CVE-2024-42289](https://patchblox.com/security/data/fix/linux/debian-cve-2024-42289.md) | Aug 17, 2024 |
| Linux | perf ol 8 | 0:5.4.17-2136.336.5.1.el7uek | [ELSA-2024-12780](https://patchblox.com/security/data/fix/linux/elsa-2024-12780.md) | Oct 11, 2024 |
| Linux | python-perf ol 8 | 0:5.4.17-2136.336.5.1.el7uek | [ELSA-2024-12780](https://patchblox.com/security/data/fix/linux/elsa-2024-12780.md) | Oct 11, 2024 |

---

Data as of 2026-11-08T13:06:02Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.