CVE-2024-24855 — Race condition vulnerability in Linux kernel scsi device driver lpfc_unregister_fcf_rescan()

CVE-2024-24855

Race condition vulnerability in Linux kernel scsi device driver lpfc_unregister_fcf_rescan() PUBLISHED

Description (CNA)

A race condition was found in the Linux kernel's scsi device driver in lpfc_unregister_fcf_rescan() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue.

Affected (CNA)

Vendor / product	Versions
Linux / Linux kernel	affected v2.6.34-rc2 before v6.5-rc2

CWE

CWE-362

References

https://bugzilla.openanolis.cn/show_bug.cgi?id=8149

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

https://bugzilla.openanolis.cn/show_bug.cgi?id=8149
https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html

siemens-SADP

No English description supplied.

https://cert-portal.siemens.com/productcert/html/ssa-082556.html