CVE-2021-46963

MediumCVSS 5.5/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Fix crash in qla2xxx_mqueuecommand()

RIP: 0010:kmem_cache_free+0xfa/0x1b0 Call Trace: qla2xxx_mqueuecommand+0x2b5/0x2c0 [qla2xxx] scsi_queue_rq+0x5e2/0xa40 __blk_mq_try_issue_directly+0x128/0x1d0 blk_mq_request_issue_directly+0x4e/0xb0

Fix incorrect call to free srb in qla2xxx_mqueuecommand(), as srb is now allocated by upper layers. This fixes smatch warning of srb unintended free.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= 64a8c5018a4b21b04a756a56c495ef47c14e92d9, < c5ab9b67d8b061de74e2ca51bf787ee599bd7f89; >= dea6ee7173039d489977c9ed92e3749154615db4, < 77509a238547863040a42d57c72403f7d4c89a8f; >= af2a0c51b1205327f55a7e82e530403ae1d42cbb, < 702cdaa2c6283c135ef16d52e0e4e3c1005aa538; >= af2a0c51b1205327f55a7e82e530403ae1d42cbb, < 80ef24175df2cba3860d0369d1c662b49ee2de56; >= af2a0c51b1205327f55a7e82e530403ae1d42cbb, < a73208e3244127ef9f2cdf24e4adb947aaa32053; >= af2a0c51b1205327f55a7e82e530403ae1d42cbb, < 6641df81ab799f28a5d564f860233dd26cca0d93; 4a1cc2f71bc57cf8dee6f58e7d2355a43aabb312; >= 4.19.90, < 4.19.191; >= 5.4.4, < 5.4.118; >= 5.3.17, < 5.4
LinuxLinux5.5

References

Timeline

Published
Feb 27, 2024
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-469645.5In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Reserve extra IRQ vectors Commit a6dcfe08487e ("scsi: qCVE-2021-469657.1In the Linux kernel, the following vulnerability has been resolved: mtd: physmap: physmap-bt1-rom: Fix unintentional stack access Cast &daCVE-2021-469667.8In the Linux kernel, the following vulnerability has been resolved: ACPI: custom_method: fix potential use-after-free issue In cm_write(),CVE-2021-469675.5In the Linux kernel, the following vulnerability has been resolved: vhost-vdpa: fix vm_flags for virtqueue doorbell mapping The virtqueue CVE-2021-469685.5In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: fix zcard and zqueue hot-unplug memleak Tests with kvm anCVE-2021-469697.8In the Linux kernel, the following vulnerability has been resolved: bus: mhi: core: Fix invalid error returning in mhi_queue mhi_queue retCVE-2021-469705.5In the Linux kernel, the following vulnerability has been resolved: bus: mhi: pci_generic: Remove WQ_MEM_RECLAIM flag from state workqueue CVE-2021-469713.3In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix unconditional security_locked_down() call Currently, thCVE-2021-469725.5In the Linux kernel, the following vulnerability has been resolved: ovl: fix leaked dentry Since commit 6815f479ca90 ("ovl: use only upperCVE-2021-469737.8In the Linux kernel, the following vulnerability has been resolved: net: qrtr: Avoid potential use after free in MHI send It is possible tCVE-2021-469745.5In the Linux kernel, the following vulnerability has been resolved: bpf: Fix masking negation logic upon negative dst register The negatioCVE-2021-469765.5In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix crash in auto_retire The retire logic uses the 2 lower b
CVE-2021-46963: Medium severity, CVSS 5.5 | Vulnix