Threats tagged 'ghsa-46xm-fghf-r34f'

A vulnerability in the Linux kernel's qla2xxx SCSI driver has been resolved. The flaw involves improper handling of dma_free_coherent() calls with NULL pointers and inconsistent locking mechanisms during queue teardown in error paths. This can lead to undefined behavior, including kernel panic, and potential race conditions corrupting queue ID mappings. The fix includes adding NULL checks before dma_free_coherent(), using consistent locking with mq_lock, and removing redundant bitmap clearing in error paths.