In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
Ensure SRB is returned during I/O timeout error escalation. If that is not possible fail the escalation path.
Following crash stack was seen:
BUG: unable to handle kernel paging request at 0000002f56aa90f8 IP: qlachkedifrxsadeletepending+0x14/0x30 [qla2xxx] Call Trace: ? qla2x00statusentry+0x19f/0x1c50 [qla2xxx] ? qla2x00startsp+0x116/0x1170 [qla2xxx] ? dmapoolalloc+0x1d6/0x210 ? mempoolalloc+0x54/0x130 ? qla24xxprocessresponsequeue+0x548/0x12b0 [qla2xxx] ? qladowork+0x2d/0x40 [qla2xxx] ? processonework+0x14c/0x390
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c39587bc0abaf16593f7abcdf8aeec3c038c7d52",
"target": {
"file": "drivers/scsi/qla2xxx/qla_os.c"
},
"digest": {
"line_hashes": [
"76853050589633134990653014931363024648",
"306088317250450316768369162268637137993",
"257397544998133102324763678230967522519",
"120577378510451428061213745771148018230",
"5022623767322925474302225907707154296",
"86437893407151974145908036451300133230",
"181978317367770877190256972296859970939",
"171054060712841864708094935838921294255",
"215240266016606811911448967931058228575",
"185979830018908689621712339700735026326",
"25199625525837052066094136627433752381",
"13707070115725818324873794565225279214",
"150044103452915347735894034675428056367",
"159502162008869996664166098320654447331",
"105481817845069570325571114584756419074",
"166958553033566416130573286741541283448",
"189351072522052428237990751226825229674",
"237758423140856563865607616057377668930",
"189348643379469638070852883927560485610",
"205909553640437880382976181977498197276",
"120991627610936352093018237054717291069",
"316938168730386169410753856014658583797",
"81471253764061131473041376339427623707",
"154761115214641236561783565827725513657",
"93775090847283494691112073929887951199",
"252821552811717894575037828274068886156",
"68343634477697002416059069258616605141",
"339286637499709990338582241766700904904",
"93775090847283494691112073929887951199",
"252821552811717894575037828274068886156",
"35276304503685371248419815445788471063",
"184806520178528835540615595166073440520"
],
"threshold": 0.9
},
"deprecated": false,
"id": "CVE-2022-50098-0992c9cf",
"signature_version": "v1",
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7dcd49c42b14717dd668fd73b503d241fdf82439",
"target": {
"function": "qla2xxx_eh_target_reset",
"file": "drivers/scsi/qla2xxx/qla_os.c"
},
"digest": {
"function_hash": "187478447425679568945775464269296137376",
"length": 1622.0
},
"deprecated": false,
"id": "CVE-2022-50098-0d9ec9ca",
"signature_version": "v1",
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b7bae3886a30d258b5b4fee26647043d68da3661",
"target": {
"function": "qla2x00_eh_wait_for_pending_commands",
"file": "drivers/scsi/qla2xxx/qla_os.c"
},
"digest": {
"function_hash": "90979182198472923850038218203431916428",
"length": 992.0
},
"deprecated": false,
"id": "CVE-2022-50098-2250f772",
"signature_version": "v1",
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b70553175d0f94ebd73670bc16ade90bd7f7d76f",
"target": {
"function": "qla2x00_eh_wait_for_pending_commands",
"file": "drivers/scsi/qla2xxx/qla_os.c"
},
"digest": {
"function_hash": "90979182198472923850038218203431916428",
"length": 992.0
},
"deprecated": false,
"id": "CVE-2022-50098-256f97fa",
"signature_version": "v1",
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b70553175d0f94ebd73670bc16ade90bd7f7d76f",
"target": {
"function": "qla2xxx_eh_target_reset",
"file": "drivers/scsi/qla2xxx/qla_os.c"
},
"digest": {
"function_hash": "187478447425679568945775464269296137376",
"length": 1622.0
},
"deprecated": false,
"id": "CVE-2022-50098-31305e4f",
"signature_version": "v1",
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c39587bc0abaf16593f7abcdf8aeec3c038c7d52",
"target": {
"function": "qla2x00_eh_wait_for_pending_commands",
"file": "drivers/scsi/qla2xxx/qla_os.c"
},
"digest": {
"function_hash": "90979182198472923850038218203431916428",
"length": 992.0
},
"deprecated": false,
"id": "CVE-2022-50098-577e925a",
"signature_version": "v1",
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b7bae3886a30d258b5b4fee26647043d68da3661",
"target": {
"function": "qla2xxx_eh_target_reset",
"file": "drivers/scsi/qla2xxx/qla_os.c"
},
"digest": {
"function_hash": "187478447425679568945775464269296137376",
"length": 1622.0
},
"deprecated": false,
"id": "CVE-2022-50098-5e5122d1",
"signature_version": "v1",
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c39587bc0abaf16593f7abcdf8aeec3c038c7d52",
"target": {
"function": "qla2xxx_eh_target_reset",
"file": "drivers/scsi/qla2xxx/qla_os.c"
},
"digest": {
"function_hash": "187478447425679568945775464269296137376",
"length": 1622.0
},
"deprecated": false,
"id": "CVE-2022-50098-76364db1",
"signature_version": "v1",
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b70553175d0f94ebd73670bc16ade90bd7f7d76f",
"target": {
"function": "qla2xxx_eh_device_reset",
"file": "drivers/scsi/qla2xxx/qla_os.c"
},
"digest": {
"function_hash": "92013801894983349827696701713388796239",
"length": 1634.0
},
"deprecated": false,
"id": "CVE-2022-50098-ad77d98b",
"signature_version": "v1",
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b70553175d0f94ebd73670bc16ade90bd7f7d76f",
"target": {
"file": "drivers/scsi/qla2xxx/qla_os.c"
},
"digest": {
"line_hashes": [
"76853050589633134990653014931363024648",
"306088317250450316768369162268637137993",
"257397544998133102324763678230967522519",
"120577378510451428061213745771148018230",
"5022623767322925474302225907707154296",
"86437893407151974145908036451300133230",
"181978317367770877190256972296859970939",
"171054060712841864708094935838921294255",
"215240266016606811911448967931058228575",
"185979830018908689621712339700735026326",
"25199625525837052066094136627433752381",
"13707070115725818324873794565225279214",
"150044103452915347735894034675428056367",
"159502162008869996664166098320654447331",
"105481817845069570325571114584756419074",
"166958553033566416130573286741541283448",
"189351072522052428237990751226825229674",
"237758423140856563865607616057377668930",
"189348643379469638070852883927560485610",
"205909553640437880382976181977498197276",
"120991627610936352093018237054717291069",
"316938168730386169410753856014658583797",
"81471253764061131473041376339427623707",
"154761115214641236561783565827725513657",
"93775090847283494691112073929887951199",
"252821552811717894575037828274068886156",
"68343634477697002416059069258616605141",
"339286637499709990338582241766700904904",
"93775090847283494691112073929887951199",
"252821552811717894575037828274068886156",
"35276304503685371248419815445788471063",
"184806520178528835540615595166073440520"
],
"threshold": 0.9
},
"deprecated": false,
"id": "CVE-2022-50098-b1b91d04",
"signature_version": "v1",
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7dcd49c42b14717dd668fd73b503d241fdf82439",
"target": {
"function": "qla2xxx_eh_device_reset",
"file": "drivers/scsi/qla2xxx/qla_os.c"
},
"digest": {
"function_hash": "92013801894983349827696701713388796239",
"length": 1634.0
},
"deprecated": false,
"id": "CVE-2022-50098-b8bf595d",
"signature_version": "v1",
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7dcd49c42b14717dd668fd73b503d241fdf82439",
"target": {
"file": "drivers/scsi/qla2xxx/qla_os.c"
},
"digest": {
"line_hashes": [
"76853050589633134990653014931363024648",
"306088317250450316768369162268637137993",
"257397544998133102324763678230967522519",
"120577378510451428061213745771148018230",
"5022623767322925474302225907707154296",
"86437893407151974145908036451300133230",
"181978317367770877190256972296859970939",
"171054060712841864708094935838921294255",
"215240266016606811911448967931058228575",
"185979830018908689621712339700735026326",
"25199625525837052066094136627433752381",
"13707070115725818324873794565225279214",
"150044103452915347735894034675428056367",
"159502162008869996664166098320654447331",
"105481817845069570325571114584756419074",
"166958553033566416130573286741541283448",
"189351072522052428237990751226825229674",
"237758423140856563865607616057377668930",
"189348643379469638070852883927560485610",
"205909553640437880382976181977498197276",
"120991627610936352093018237054717291069",
"316938168730386169410753856014658583797",
"81471253764061131473041376339427623707",
"154761115214641236561783565827725513657",
"93775090847283494691112073929887951199",
"252821552811717894575037828274068886156",
"68343634477697002416059069258616605141",
"339286637499709990338582241766700904904",
"93775090847283494691112073929887951199",
"252821552811717894575037828274068886156",
"35276304503685371248419815445788471063",
"184806520178528835540615595166073440520"
],
"threshold": 0.9
},
"deprecated": false,
"id": "CVE-2022-50098-c6cf811a",
"signature_version": "v1",
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b7bae3886a30d258b5b4fee26647043d68da3661",
"target": {
"file": "drivers/scsi/qla2xxx/qla_os.c"
},
"digest": {
"line_hashes": [
"76853050589633134990653014931363024648",
"306088317250450316768369162268637137993",
"257397544998133102324763678230967522519",
"120577378510451428061213745771148018230",
"5022623767322925474302225907707154296",
"86437893407151974145908036451300133230",
"181978317367770877190256972296859970939",
"171054060712841864708094935838921294255",
"215240266016606811911448967931058228575",
"185979830018908689621712339700735026326",
"25199625525837052066094136627433752381",
"13707070115725818324873794565225279214",
"150044103452915347735894034675428056367",
"159502162008869996664166098320654447331",
"105481817845069570325571114584756419074",
"166958553033566416130573286741541283448",
"189351072522052428237990751226825229674",
"237758423140856563865607616057377668930",
"189348643379469638070852883927560485610",
"205909553640437880382976181977498197276",
"120991627610936352093018237054717291069",
"316938168730386169410753856014658583797",
"81471253764061131473041376339427623707",
"154761115214641236561783565827725513657",
"93775090847283494691112073929887951199",
"252821552811717894575037828274068886156",
"68343634477697002416059069258616605141",
"339286637499709990338582241766700904904",
"93775090847283494691112073929887951199",
"252821552811717894575037828274068886156",
"35276304503685371248419815445788471063",
"184806520178528835540615595166073440520"
],
"threshold": 0.9
},
"deprecated": false,
"id": "CVE-2022-50098-cb6909bf",
"signature_version": "v1",
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b7bae3886a30d258b5b4fee26647043d68da3661",
"target": {
"function": "qla2xxx_eh_device_reset",
"file": "drivers/scsi/qla2xxx/qla_os.c"
},
"digest": {
"function_hash": "92013801894983349827696701713388796239",
"length": 1634.0
},
"deprecated": false,
"id": "CVE-2022-50098-e3e89c6b",
"signature_version": "v1",
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7dcd49c42b14717dd668fd73b503d241fdf82439",
"target": {
"function": "qla2x00_eh_wait_for_pending_commands",
"file": "drivers/scsi/qla2xxx/qla_os.c"
},
"digest": {
"function_hash": "90979182198472923850038218203431916428",
"length": 992.0
},
"deprecated": false,
"id": "CVE-2022-50098-f4286c85",
"signature_version": "v1",
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c39587bc0abaf16593f7abcdf8aeec3c038c7d52",
"target": {
"function": "qla2xxx_eh_device_reset",
"file": "drivers/scsi/qla2xxx/qla_os.c"
},
"digest": {
"function_hash": "92013801894983349827696701713388796239",
"length": 1634.0
},
"deprecated": false,
"id": "CVE-2022-50098-fc8e7383",
"signature_version": "v1",
"signature_type": "Function"
}
]