CVE-2024-56623

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Fix use after free on unload

System crash is observed with stack trace warning of use after

free. There are 2 signals to tell dpc_thread to terminate (UNLOADING

flag and kthread_stop).

On setting the UNLOADING flag when dpc_thread happens to run at the time

and sees the flag, this causes dpc_thread to exit and clean up

itself. When kthread_stop is called for final cleanup, this causes use

after free.

Remove UNLOADING signal to terminate dpc_thread. Use the kthread_stop

as the main signal to exit dpc_thread.

[596663.812935] kernel BUG at mm/slub.c:294!

[596663.812950] invalid opcode: 0000 [#1] SMP PTI

[596663.812957] CPU: 13 PID: 1475935 Comm: rmmod Kdump: loaded Tainted: G IOE --------- - - 4.18.0-240.el8.x86_64 #1

[596663.812960] Hardware name: HP ProLiant DL380p Gen8, BIOS P70 08/20/2012

[596663.812974] RIP: 0010:__slab_free+0x17d/0x360

...

[596663.813008] Call Trace:

[596663.813022

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References