Threats tagged 'ghsa-cw7x-747c-3cx3'

A use-after-free vulnerability in the Linux kernel's qla2xxx SCSI driver related to NVMe unsolicited context handling has been resolved. The flaw occurs because a context structure is freed without being unlinked from a linked list, leading to potential list corruption or kernel panic. This affects specific versions of the linux-hwe-edge kernel. The vulnerability has a high CVSS score of 8.8, indicating significant impact on confidentiality, integrity, and availability. No known exploits are reported in the wild. Remediation involves unlinking the context before freeing it, matching the fix applied in the kernel source.