Threats tagged 'ghsa-rmg2-25hr-q94v'

A concurrency vulnerability in the Linux kernel's qla2xxx SCSI driver was resolved by introducing a dedicated per-fcport spinlock to serialize modifications to the NVMe unsolicited context list. The vulnerability involved unsynchronized concurrent modifications to a shared list, which could corrupt list pointers. This issue affects specific versions of the linux-hwe-edge kernel and has a CVSS score of 8.8, indicating high impact on confidentiality, integrity, and availability.