In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix command flush on cable pull System crash due to command… (CVE-2024-26931)
A vulnerability in the Linux kernel's qla2xxx SCSI driver causes a system crash due to a NULL pointer dereference when handling command flush on cable pull events. The issue arises under memory stress when the driver fails to allocate resources for error recovery, leading to invalid memory access during DMA unmapping. This flaw results in a denial of service (system crash) but does not impact confidentiality or integrity.
AI Analysis
Technical Summary
CVE-2024-26931 is a moderate severity vulnerability in the Linux kernel's qla2xxx SCSI driver. It occurs when the system is under memory pressure and the driver cannot allocate an SRB for error recovery during a cable pull event. This failure prevents proper flushing of commands back to the SCSI layer, causing the upper layers to modify scsi_cmnd structures improperly. When memory is freed and another cable pull triggers a command flush, the driver attempts to DMA unmap a scatter-gather list (SGL) via a NULL pointer, causing a kernel NULL pointer dereference and system crash. The fix involves adding checks to ensure commands are flushed back on session teardown to prevent NULL pointer access.
Potential Impact
The vulnerability leads to a denial of service by causing a kernel crash (NULL pointer dereference) when handling cable pull events under memory stress. There is no impact on confidentiality or integrity. The crash can disrupt system availability.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, monitoring for system crashes related to qla2xxx during cable pull events and avoiding memory stress conditions may reduce exposure. Follow vendor updates for an official fix.
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix command flush on cable pull System crash due to command… (CVE-2024-26931)
Description
A vulnerability in the Linux kernel's qla2xxx SCSI driver causes a system crash due to a NULL pointer dereference when handling command flush on cable pull events. The issue arises under memory stress when the driver fails to allocate resources for error recovery, leading to invalid memory access during DMA unmapping. This flaw results in a denial of service (system crash) but does not impact confidentiality or integrity.
CVSS v3.1
Score 5.5medium
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2024-26931 is a moderate severity vulnerability in the Linux kernel's qla2xxx SCSI driver. It occurs when the system is under memory pressure and the driver cannot allocate an SRB for error recovery during a cable pull event. This failure prevents proper flushing of commands back to the SCSI layer, causing the upper layers to modify scsi_cmnd structures improperly. When memory is freed and another cable pull triggers a command flush, the driver attempts to DMA unmap a scatter-gather list (SGL) via a NULL pointer, causing a kernel NULL pointer dereference and system crash. The fix involves adding checks to ensure commands are flushed back on session teardown to prevent NULL pointer access.
Potential Impact
The vulnerability leads to a denial of service by causing a kernel crash (NULL pointer dereference) when handling cable pull events under memory stress. There is no impact on confidentiality or integrity. The crash can disrupt system availability.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, monitoring for system crashes related to qla2xxx during cable pull events and avoiding memory stress conditions may reduce exposure. Follow vendor updates for an official fix.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-2x59-7x95-wr65
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2024-26931"]
- Ecosystems
- []
- Database Specific Severity
- MODERATE
- Cvss Version
- 3.1
Threat ID: 6a71feebbf8831d539ff12ea
Added to database: 08/04/2026, 15:02:03 UTC
Last enriched: 08/04/2026, 15:19:40 UTC
Last updated: 08/04/2026, 15:21:03 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.