Threats tagged 'ghsa-xv7c-g3v3-rjqw'

CVE-2024-42289 is a vulnerability in the Linux kernel's qla2xxx SCSI driver. It occurs during the deletion of virtual ports (vports), where stale I/O entries cause a kernel crash due to a NULL pointer dereference. The issue arises because asynchronous logout was not explicitly sent for all ports during vport deletion, leading to aborted I/Os that cannot complete and resulting in a crash.