CVE-2022-50098

Source
https://nvd.nist.gov/vuln/detail/CVE-2022-50098
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50098.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-50098
Downstream
Related
Published
2025-06-18T11:02:35Z
Modified
2025-10-21T11:42:57.908269Z
Summary
scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
Details

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts

Ensure SRB is returned during I/O timeout error escalation. If that is not possible fail the escalation path.

Following crash stack was seen:

BUG: unable to handle kernel paging request at 0000002f56aa90f8 IP: qlachkedifrxsadeletepending+0x14/0x30 [qla2xxx] Call Trace: ? qla2x00statusentry+0x19f/0x1c50 [qla2xxx] ? qla2x00startsp+0x116/0x1170 [qla2xxx] ? dmapoolalloc+0x1d6/0x210 ? mempoolalloc+0x54/0x130 ? qla24xxprocessresponsequeue+0x548/0x12b0 [qla2xxx] ? qladowork+0x2d/0x40 [qla2xxx] ? processonework+0x14c/0x390

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d74595278f4ab192af66d9e60a9087464638beee
Fixed
b7bae3886a30d258b5b4fee26647043d68da3661
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d74595278f4ab192af66d9e60a9087464638beee
Fixed
b70553175d0f94ebd73670bc16ade90bd7f7d76f
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d74595278f4ab192af66d9e60a9087464638beee
Fixed
7dcd49c42b14717dd668fd73b503d241fdf82439
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d74595278f4ab192af66d9e60a9087464638beee
Fixed
c39587bc0abaf16593f7abcdf8aeec3c038c7d52

Affected versions

v4.*

v4.10
v4.10-rc1
v4.10-rc2
v4.10-rc3
v4.10-rc4
v4.10-rc5
v4.10-rc6
v4.10-rc7
v4.10-rc8
v4.11
v4.11-rc1
v4.11-rc2
v4.11-rc3
v4.11-rc4
v4.11-rc5
v4.11-rc6
v4.11-rc7
v4.11-rc8
v4.12
v4.12-rc1
v4.12-rc2
v4.12-rc3
v4.12-rc4
v4.12-rc5
v4.12-rc6
v4.12-rc7
v4.13
v4.13-rc1
v4.13-rc2
v4.13-rc3
v4.13-rc4
v4.13-rc5
v4.13-rc6
v4.13-rc7
v4.14
v4.14-rc1
v4.14-rc2
v4.14-rc3
v4.14-rc4
v4.14-rc5
v4.14-rc6
v4.14-rc7
v4.14-rc8
v4.15
v4.15-rc1
v4.15-rc2
v4.15-rc3
v4.15-rc4
v4.15-rc5
v4.15-rc6
v4.15-rc7
v4.15-rc8
v4.15-rc9
v4.16
v4.16-rc1
v4.16-rc2
v4.16-rc3
v4.16-rc4
v4.16-rc5
v4.16-rc6
v4.16-rc7
v4.17
v4.17-rc1
v4.17-rc2
v4.17-rc3
v4.17-rc4
v4.17-rc5
v4.17-rc6
v4.17-rc7
v4.18
v4.18-rc1
v4.18-rc2
v4.18-rc3
v4.18-rc4
v4.18-rc5
v4.18-rc6
v4.18-rc7
v4.18-rc8
v4.19
v4.19-rc1
v4.19-rc2
v4.19-rc3
v4.19-rc4
v4.19-rc5
v4.19-rc6
v4.19-rc7
v4.19-rc8
v4.20
v4.20-rc1
v4.20-rc2
v4.20-rc3
v4.20-rc4
v4.20-rc5
v4.20-rc6
v4.20-rc7

v5.*

v5.0
v5.0-rc1
v5.0-rc2
v5.0-rc3
v5.0-rc4
v5.0-rc5
v5.0-rc6
v5.0-rc7
v5.0-rc8
v5.1
v5.1-rc1
v5.1-rc2
v5.1-rc3
v5.1-rc4
v5.1-rc5
v5.1-rc6
v5.1-rc7
v5.10
v5.10-rc1
v5.10-rc2
v5.10-rc3
v5.10-rc4
v5.10-rc5
v5.10-rc6
v5.10-rc7
v5.11
v5.11-rc1
v5.11-rc2
v5.11-rc3
v5.11-rc4
v5.11-rc5
v5.11-rc6
v5.11-rc7
v5.12
v5.12-rc1
v5.12-rc1-dontuse
v5.12-rc2
v5.12-rc3
v5.12-rc4
v5.12-rc5
v5.12-rc6
v5.12-rc7
v5.12-rc8
v5.13
v5.13-rc1
v5.13-rc2
v5.13-rc3
v5.13-rc4
v5.13-rc5
v5.13-rc6
v5.13-rc7
v5.14
v5.14-rc1
v5.14-rc2
v5.14-rc3
v5.14-rc4
v5.14-rc5
v5.14-rc6
v5.14-rc7
v5.15
v5.15-rc1
v5.15-rc2
v5.15-rc3
v5.15-rc4
v5.15-rc5
v5.15-rc6
v5.15-rc7
v5.15.1
v5.15.10
v5.15.11
v5.15.12
v5.15.13
v5.15.14
v5.15.15
v5.15.16
v5.15.17
v5.15.18
v5.15.19
v5.15.2
v5.15.20
v5.15.21
v5.15.22
v5.15.23
v5.15.24
v5.15.25
v5.15.26
v5.15.27
v5.15.28
v5.15.29
v5.15.3
v5.15.30
v5.15.31
v5.15.32
v5.15.33
v5.15.34
v5.15.35
v5.15.36
v5.15.37
v5.15.38
v5.15.39
v5.15.4
v5.15.40
v5.15.41
v5.15.42
v5.15.43
v5.15.44
v5.15.45
v5.15.46
v5.15.47
v5.15.48
v5.15.49
v5.15.5
v5.15.50
v5.15.51
v5.15.52
v5.15.53
v5.15.54
v5.15.55
v5.15.56
v5.15.57
v5.15.58
v5.15.59
v5.15.6
v5.15.60
v5.15.7
v5.15.8
v5.15.9
v5.16
v5.16-rc1
v5.16-rc2
v5.16-rc3
v5.16-rc4
v5.16-rc5
v5.16-rc6
v5.16-rc7
v5.16-rc8
v5.17
v5.17-rc1
v5.17-rc2
v5.17-rc3
v5.17-rc4
v5.17-rc5
v5.17-rc6
v5.17-rc7
v5.17-rc8
v5.18
v5.18-rc1
v5.18-rc2
v5.18-rc3
v5.18-rc4
v5.18-rc5
v5.18-rc6
v5.18-rc7
v5.18.1
v5.18.10
v5.18.11
v5.18.12
v5.18.13
v5.18.14
v5.18.15
v5.18.16
v5.18.17
v5.18.2
v5.18.3
v5.18.4
v5.18.5
v5.18.6
v5.18.7
v5.18.8
v5.18.9
v5.19
v5.19-rc1
v5.19-rc2
v5.19-rc3
v5.19-rc4
v5.19-rc5
v5.19-rc6
v5.19-rc7
v5.19-rc8
v5.19.1
v5.2
v5.2-rc1
v5.2-rc2
v5.2-rc3
v5.2-rc4
v5.2-rc5
v5.2-rc6
v5.2-rc7
v5.3
v5.3-rc1
v5.3-rc2
v5.3-rc3
v5.3-rc4
v5.3-rc5
v5.3-rc6
v5.3-rc7
v5.3-rc8
v5.4
v5.4-rc1
v5.4-rc2
v5.4-rc3
v5.4-rc4
v5.4-rc5
v5.4-rc6
v5.4-rc7
v5.4-rc8
v5.5
v5.5-rc1
v5.5-rc2
v5.5-rc3
v5.5-rc4
v5.5-rc5
v5.5-rc6
v5.5-rc7
v5.6
v5.6-rc1
v5.6-rc2
v5.6-rc3
v5.6-rc4
v5.6-rc5
v5.6-rc6
v5.6-rc7
v5.7
v5.7-rc1
v5.7-rc2
v5.7-rc3
v5.7-rc4
v5.7-rc5
v5.7-rc6
v5.7-rc7
v5.8
v5.8-rc1
v5.8-rc2
v5.8-rc3
v5.8-rc4
v5.8-rc5
v5.8-rc6
v5.8-rc7
v5.9
v5.9-rc1
v5.9-rc2
v5.9-rc3
v5.9-rc4
v5.9-rc5
v5.9-rc6
v5.9-rc7
v5.9-rc8

Database specific

vanir_signatures

[
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c39587bc0abaf16593f7abcdf8aeec3c038c7d52",
        "target": {
            "file": "drivers/scsi/qla2xxx/qla_os.c"
        },
        "digest": {
            "line_hashes": [
                "76853050589633134990653014931363024648",
                "306088317250450316768369162268637137993",
                "257397544998133102324763678230967522519",
                "120577378510451428061213745771148018230",
                "5022623767322925474302225907707154296",
                "86437893407151974145908036451300133230",
                "181978317367770877190256972296859970939",
                "171054060712841864708094935838921294255",
                "215240266016606811911448967931058228575",
                "185979830018908689621712339700735026326",
                "25199625525837052066094136627433752381",
                "13707070115725818324873794565225279214",
                "150044103452915347735894034675428056367",
                "159502162008869996664166098320654447331",
                "105481817845069570325571114584756419074",
                "166958553033566416130573286741541283448",
                "189351072522052428237990751226825229674",
                "237758423140856563865607616057377668930",
                "189348643379469638070852883927560485610",
                "205909553640437880382976181977498197276",
                "120991627610936352093018237054717291069",
                "316938168730386169410753856014658583797",
                "81471253764061131473041376339427623707",
                "154761115214641236561783565827725513657",
                "93775090847283494691112073929887951199",
                "252821552811717894575037828274068886156",
                "68343634477697002416059069258616605141",
                "339286637499709990338582241766700904904",
                "93775090847283494691112073929887951199",
                "252821552811717894575037828274068886156",
                "35276304503685371248419815445788471063",
                "184806520178528835540615595166073440520"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "id": "CVE-2022-50098-0992c9cf",
        "signature_version": "v1",
        "signature_type": "Line"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7dcd49c42b14717dd668fd73b503d241fdf82439",
        "target": {
            "function": "qla2xxx_eh_target_reset",
            "file": "drivers/scsi/qla2xxx/qla_os.c"
        },
        "digest": {
            "function_hash": "187478447425679568945775464269296137376",
            "length": 1622.0
        },
        "deprecated": false,
        "id": "CVE-2022-50098-0d9ec9ca",
        "signature_version": "v1",
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b7bae3886a30d258b5b4fee26647043d68da3661",
        "target": {
            "function": "qla2x00_eh_wait_for_pending_commands",
            "file": "drivers/scsi/qla2xxx/qla_os.c"
        },
        "digest": {
            "function_hash": "90979182198472923850038218203431916428",
            "length": 992.0
        },
        "deprecated": false,
        "id": "CVE-2022-50098-2250f772",
        "signature_version": "v1",
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b70553175d0f94ebd73670bc16ade90bd7f7d76f",
        "target": {
            "function": "qla2x00_eh_wait_for_pending_commands",
            "file": "drivers/scsi/qla2xxx/qla_os.c"
        },
        "digest": {
            "function_hash": "90979182198472923850038218203431916428",
            "length": 992.0
        },
        "deprecated": false,
        "id": "CVE-2022-50098-256f97fa",
        "signature_version": "v1",
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b70553175d0f94ebd73670bc16ade90bd7f7d76f",
        "target": {
            "function": "qla2xxx_eh_target_reset",
            "file": "drivers/scsi/qla2xxx/qla_os.c"
        },
        "digest": {
            "function_hash": "187478447425679568945775464269296137376",
            "length": 1622.0
        },
        "deprecated": false,
        "id": "CVE-2022-50098-31305e4f",
        "signature_version": "v1",
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c39587bc0abaf16593f7abcdf8aeec3c038c7d52",
        "target": {
            "function": "qla2x00_eh_wait_for_pending_commands",
            "file": "drivers/scsi/qla2xxx/qla_os.c"
        },
        "digest": {
            "function_hash": "90979182198472923850038218203431916428",
            "length": 992.0
        },
        "deprecated": false,
        "id": "CVE-2022-50098-577e925a",
        "signature_version": "v1",
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b7bae3886a30d258b5b4fee26647043d68da3661",
        "target": {
            "function": "qla2xxx_eh_target_reset",
            "file": "drivers/scsi/qla2xxx/qla_os.c"
        },
        "digest": {
            "function_hash": "187478447425679568945775464269296137376",
            "length": 1622.0
        },
        "deprecated": false,
        "id": "CVE-2022-50098-5e5122d1",
        "signature_version": "v1",
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c39587bc0abaf16593f7abcdf8aeec3c038c7d52",
        "target": {
            "function": "qla2xxx_eh_target_reset",
            "file": "drivers/scsi/qla2xxx/qla_os.c"
        },
        "digest": {
            "function_hash": "187478447425679568945775464269296137376",
            "length": 1622.0
        },
        "deprecated": false,
        "id": "CVE-2022-50098-76364db1",
        "signature_version": "v1",
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b70553175d0f94ebd73670bc16ade90bd7f7d76f",
        "target": {
            "function": "qla2xxx_eh_device_reset",
            "file": "drivers/scsi/qla2xxx/qla_os.c"
        },
        "digest": {
            "function_hash": "92013801894983349827696701713388796239",
            "length": 1634.0
        },
        "deprecated": false,
        "id": "CVE-2022-50098-ad77d98b",
        "signature_version": "v1",
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b70553175d0f94ebd73670bc16ade90bd7f7d76f",
        "target": {
            "file": "drivers/scsi/qla2xxx/qla_os.c"
        },
        "digest": {
            "line_hashes": [
                "76853050589633134990653014931363024648",
                "306088317250450316768369162268637137993",
                "257397544998133102324763678230967522519",
                "120577378510451428061213745771148018230",
                "5022623767322925474302225907707154296",
                "86437893407151974145908036451300133230",
                "181978317367770877190256972296859970939",
                "171054060712841864708094935838921294255",
                "215240266016606811911448967931058228575",
                "185979830018908689621712339700735026326",
                "25199625525837052066094136627433752381",
                "13707070115725818324873794565225279214",
                "150044103452915347735894034675428056367",
                "159502162008869996664166098320654447331",
                "105481817845069570325571114584756419074",
                "166958553033566416130573286741541283448",
                "189351072522052428237990751226825229674",
                "237758423140856563865607616057377668930",
                "189348643379469638070852883927560485610",
                "205909553640437880382976181977498197276",
                "120991627610936352093018237054717291069",
                "316938168730386169410753856014658583797",
                "81471253764061131473041376339427623707",
                "154761115214641236561783565827725513657",
                "93775090847283494691112073929887951199",
                "252821552811717894575037828274068886156",
                "68343634477697002416059069258616605141",
                "339286637499709990338582241766700904904",
                "93775090847283494691112073929887951199",
                "252821552811717894575037828274068886156",
                "35276304503685371248419815445788471063",
                "184806520178528835540615595166073440520"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "id": "CVE-2022-50098-b1b91d04",
        "signature_version": "v1",
        "signature_type": "Line"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7dcd49c42b14717dd668fd73b503d241fdf82439",
        "target": {
            "function": "qla2xxx_eh_device_reset",
            "file": "drivers/scsi/qla2xxx/qla_os.c"
        },
        "digest": {
            "function_hash": "92013801894983349827696701713388796239",
            "length": 1634.0
        },
        "deprecated": false,
        "id": "CVE-2022-50098-b8bf595d",
        "signature_version": "v1",
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7dcd49c42b14717dd668fd73b503d241fdf82439",
        "target": {
            "file": "drivers/scsi/qla2xxx/qla_os.c"
        },
        "digest": {
            "line_hashes": [
                "76853050589633134990653014931363024648",
                "306088317250450316768369162268637137993",
                "257397544998133102324763678230967522519",
                "120577378510451428061213745771148018230",
                "5022623767322925474302225907707154296",
                "86437893407151974145908036451300133230",
                "181978317367770877190256972296859970939",
                "171054060712841864708094935838921294255",
                "215240266016606811911448967931058228575",
                "185979830018908689621712339700735026326",
                "25199625525837052066094136627433752381",
                "13707070115725818324873794565225279214",
                "150044103452915347735894034675428056367",
                "159502162008869996664166098320654447331",
                "105481817845069570325571114584756419074",
                "166958553033566416130573286741541283448",
                "189351072522052428237990751226825229674",
                "237758423140856563865607616057377668930",
                "189348643379469638070852883927560485610",
                "205909553640437880382976181977498197276",
                "120991627610936352093018237054717291069",
                "316938168730386169410753856014658583797",
                "81471253764061131473041376339427623707",
                "154761115214641236561783565827725513657",
                "93775090847283494691112073929887951199",
                "252821552811717894575037828274068886156",
                "68343634477697002416059069258616605141",
                "339286637499709990338582241766700904904",
                "93775090847283494691112073929887951199",
                "252821552811717894575037828274068886156",
                "35276304503685371248419815445788471063",
                "184806520178528835540615595166073440520"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "id": "CVE-2022-50098-c6cf811a",
        "signature_version": "v1",
        "signature_type": "Line"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b7bae3886a30d258b5b4fee26647043d68da3661",
        "target": {
            "file": "drivers/scsi/qla2xxx/qla_os.c"
        },
        "digest": {
            "line_hashes": [
                "76853050589633134990653014931363024648",
                "306088317250450316768369162268637137993",
                "257397544998133102324763678230967522519",
                "120577378510451428061213745771148018230",
                "5022623767322925474302225907707154296",
                "86437893407151974145908036451300133230",
                "181978317367770877190256972296859970939",
                "171054060712841864708094935838921294255",
                "215240266016606811911448967931058228575",
                "185979830018908689621712339700735026326",
                "25199625525837052066094136627433752381",
                "13707070115725818324873794565225279214",
                "150044103452915347735894034675428056367",
                "159502162008869996664166098320654447331",
                "105481817845069570325571114584756419074",
                "166958553033566416130573286741541283448",
                "189351072522052428237990751226825229674",
                "237758423140856563865607616057377668930",
                "189348643379469638070852883927560485610",
                "205909553640437880382976181977498197276",
                "120991627610936352093018237054717291069",
                "316938168730386169410753856014658583797",
                "81471253764061131473041376339427623707",
                "154761115214641236561783565827725513657",
                "93775090847283494691112073929887951199",
                "252821552811717894575037828274068886156",
                "68343634477697002416059069258616605141",
                "339286637499709990338582241766700904904",
                "93775090847283494691112073929887951199",
                "252821552811717894575037828274068886156",
                "35276304503685371248419815445788471063",
                "184806520178528835540615595166073440520"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "id": "CVE-2022-50098-cb6909bf",
        "signature_version": "v1",
        "signature_type": "Line"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b7bae3886a30d258b5b4fee26647043d68da3661",
        "target": {
            "function": "qla2xxx_eh_device_reset",
            "file": "drivers/scsi/qla2xxx/qla_os.c"
        },
        "digest": {
            "function_hash": "92013801894983349827696701713388796239",
            "length": 1634.0
        },
        "deprecated": false,
        "id": "CVE-2022-50098-e3e89c6b",
        "signature_version": "v1",
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7dcd49c42b14717dd668fd73b503d241fdf82439",
        "target": {
            "function": "qla2x00_eh_wait_for_pending_commands",
            "file": "drivers/scsi/qla2xxx/qla_os.c"
        },
        "digest": {
            "function_hash": "90979182198472923850038218203431916428",
            "length": 992.0
        },
        "deprecated": false,
        "id": "CVE-2022-50098-f4286c85",
        "signature_version": "v1",
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c39587bc0abaf16593f7abcdf8aeec3c038c7d52",
        "target": {
            "function": "qla2xxx_eh_device_reset",
            "file": "drivers/scsi/qla2xxx/qla_os.c"
        },
        "digest": {
            "function_hash": "92013801894983349827696701713388796239",
            "length": 1634.0
        },
        "deprecated": false,
        "id": "CVE-2022-50098-fc8e7383",
        "signature_version": "v1",
        "signature_type": "Function"
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.10.0
Fixed
5.15.61
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
5.18.18
Type
ECOSYSTEM
Events
Introduced
5.19.0
Fixed
5.19.2