Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: scsi: Revert "scsi: core: Do not increase scsi_device's iorequest_cnt if dispatch failed" The "atomic_inc(&cmd->device->iorequest_cnt)" in scsi_queue_rq() would cause kernel panic because cmd->device may be freed after returning from scsi_dispatch_cmd(). This reverts commit cfee29ffb45b1c9798011b19d454637d1b0fe87d.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected cfee29ffb45b1c9798011b19d454637d1b0fe87d before 35fe6fa57b994e7da222893adf0bb748d6055e73; affected cfee29ffb45b1c9798011b19d454637d1b0fe87d before 6ca9818d1624e136a76ae8faedb6b6c95ca66903 |
| Linux / Linux | affected 6.2; unaffected 0 before 6.2; unaffected 6.3.4 through 6.3.*; unaffected 6.4 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/35fe6fa57b994e7da222893adf0bb748d6055e73
- https://git.kernel.org/stable/c/6ca9818d1624e136a76ae8faedb6b6c95ca66903
ADP enrichment
No English description supplied.
No references supplied.