Log in Start free

Vulnerability · Published May 30, 2024 · Assigned by Linux

CVE-2024-36952scsi: lpfc: Move NPIV's transport unregistration to after resource clean up

Medium 4.7

In plain English

A medium-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)4.7Medium
Exploit odds (30 days)0.2%top 87.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up There are cases after NPIV deletion where the fabric switch still believes the NPIV is logged into the fabric. This occurs when a vport is unregistered before the Remove All DA_ID CT and LOGO ELS are sent to the fabric. Currently fc_remove_host(), which calls dev_loss_tmo for all D_IDs including the fabric D_ID, removes the last ndlp reference and frees the ndlp rport object. This sometimes causes the race condition where the final DA_ID and LOGO are skipped from being sent to the fabric switch. Fix by moving the fc_remove_host() and scsi_remove_host() calls after DA_ID and LOGO are sent.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:9bpftool7.3.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-64k5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-64k-core5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-64k-debug5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-64k-debug-core5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-64k-debug-devel5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-64k-debug-devel-matched5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-64k-debug-modules5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-64k-debug-modules-core5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-64k-debug-modules-extra5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-64k-devel5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-64k-devel-matched5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-64k-modules5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-64k-modules-core5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-64k-modules-extra5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-abi-stablelists5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-core5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-cross-headers5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-debug5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-debug-core5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-debug-devel5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-debug-devel-matched5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-debug-modules5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-debug-modules-core5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-debug-modules-extra5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-debug-uki-virt5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-devel5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-devel-matched5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-doc5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-headers5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-modules5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-modules-core5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-modules-extra5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-rt5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-rt-core5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-rt-debug5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-rt-debug-core5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-rt-debug-devel5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-rt-debug-modules5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-rt-debug-modules-core5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-rt-debug-modules-extra5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-rt-devel5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-rt-modules5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-rt-modules-core5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-rt-modules-extra5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-tools5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-tools-libs5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-tools-libs-devel5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-uki-virt5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-zfcpdump5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-zfcpdump-core5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-zfcpdump-devel5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-zfcpdump-devel-matched5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-zfcpdump-modules5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-zfcpdump-modules-core5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9kernel-zfcpdump-modules-extra5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9libperf5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9perf5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9python3-perf5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9rtla5.14.0-427.28.1.el9_4ALSA-2024:4928
AlmaLinux:9rv5.14.0-427.28.1.el9_4ALSA-2024:4928
Debian:12linux6.1.94-1DEBIAN-CVE-2024-36952
Debian:13linux6.8.11-1DEBIAN-CVE-2024-36952
Debian:14linux6.8.11-1DEBIAN-CVE-2024-36952
Rocky Linux:9kernel0:5.14.0-427.28.1.el9_4RLSA-2024:4928
Rocky Linux:9kernel0:5.14.0-427.28.1.el9_4.cloud.1.0RXSA-2024:4928
Ubuntu:22.04:LTSlinux5.15.0-118.128USN-6950-1
Ubuntu:22.04:LTSlinux5.15.0-118.128UBUNTU-CVE-2024-36952
Ubuntu:24.04:LTSlinux6.8.0-40.40UBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-aws5.15.0-1067.73UBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-aws5.15.0-1067.73USN-6950-1
Ubuntu:24.04:LTSlinux-aws6.8.0-1013.14UBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1013.14~22.04.1UBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-azure5.15.0-1070.79USN-6956-1
Ubuntu:22.04:LTSlinux-azure5.15.0-1070.79UBUNTU-CVE-2024-36952
Ubuntu:24.04:LTSlinux-azure6.8.0-1012.14UBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1012.14~22.04.1UBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1070.79.1UBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1070.79.1USN-6956-1
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-gcp5.15.0-1066.74UBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-gcp5.15.0-1066.74USN-6950-1
Ubuntu:24.04:LTSlinux-gcp6.8.0-1012.13UBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1012.13~22.04.1UBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-gke5.15.0-1064.70UBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-gke5.15.0-1064.70USN-6950-1
Ubuntu:24.04:LTSlinux-gke6.8.0-1008.11UBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1050.57UBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1050.57USN-6950-1
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-40.40~22.04.3UBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-ibm5.15.0-1060.63USN-6950-2
Ubuntu:22.04:LTSlinux-ibm5.15.0-1060.63UBUNTU-CVE-2024-36952
Ubuntu:24.04:LTSlinux-ibm6.8.0-1010.10UBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1010.10~22.04.1UBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1062.68UBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1062.68USN-6950-1
Ubuntu:22.04:LTSlinux-kvm5.15.0-1064.69USN-6950-1
Ubuntu:22.04:LTSlinux-kvm5.15.0-1064.69UBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-118.128USN-6950-1
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-118.128UBUNTU-CVE-2024-36952
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-40.40.1UBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-40.40.1~22.04.1UBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1062.63USN-6950-1
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1062.63UBUNTU-CVE-2024-36952
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1011.11UBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1011.11~22.04.1UBUNTU-CVE-2024-36952
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1011.11.1UBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1027.27UBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1015.15UBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2024-36952
Ubuntu:24.04:LTSlinux-oem-6.86.8.0-1010.10UBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-oracle5.15.0-1065.71UBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-oracle5.15.0-1065.71USN-6950-3
Ubuntu:24.04:LTSlinux-oracle6.8.0-1010.10UBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1010.10~22.04.1UBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-raspi5.15.0-1060.63USN-6950-2
Ubuntu:22.04:LTSlinux-raspi5.15.0-1060.63UBUNTU-CVE-2024-36952
Ubuntu:24.04:LTSlinux-raspi6.8.0-1009.10UBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2024-36952
Ubuntu:24.04:LTSlinux-riscv6.8.0-40.40.1UBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-40.40.1~22.04.1UBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2024-36952
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1035.39UBUNTU-CVE-2024-36952

Affected products (as reported)

VendorProductVersions
Linux Linux 92d7f7b0cde3ad2260e7462b40867b57efd49851 – before f2c7f029051edc4b394bb48edbe2297575abefe092d7f7b0cde3ad2260e7462b40867b57efd49851 – before 0936809d968ecf81e0726fbd02ff2a5732d960c392d7f7b0cde3ad2260e7462b40867b57efd49851 – before 76337eb8daee32bcc67742efab3168ed4ca299d092d7f7b0cde3ad2260e7462b40867b57efd49851 – before 718602cd15f4c5710850090ea3066a89eeb4627892d7f7b0cde3ad2260e7462b40867b57efd49851 – before 4ddf01f2f1504fa08b766e8cfeec558e9f8eef6c
Linux Linux 2.6.23

References