CVE-2024-26930

HighCVSS 7.8/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Fix double free of the ha->vp_map pointer

Coverity scan reported potential risk of double free of the pointer ha->vp_map. ha->vp_map was freed in qla2x00_mem_alloc(), and again freed in function qla2x00_mem_free(ha).

Assign NULL to vp_map and kfree take care of NULL.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

VendorProductVersions
LinuxLinux>= 430eef03a763e5e76a371ba6d02779ae4a64b6ea, < f14cee7a882cb79528f17a2335f53e9fd1848467; >= 430eef03a763e5e76a371ba6d02779ae4a64b6ea, < b7deb675d674f44e0ddbab87fee8f9f098925e73; >= 430eef03a763e5e76a371ba6d02779ae4a64b6ea, < 825d63164a2e6bacb059a9afb5605425b485413f; >= 430eef03a763e5e76a371ba6d02779ae4a64b6ea, < e288285d47784fdcf7c81be56df7d65c6f10c58b
LinuxLinux6.3

References

Timeline

Published
May 1, 2024
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-269315.5In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix command flush on cable pull System crash due to comCVE-2024-269327.8In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: fix double-free issue in tcpm_port_unregister_pd() WCVE-2024-269337.8In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix deadlock in port "disable" sysfs attribute The show andCVE-2024-269347.8In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix deadlock in usb_deauthorize_interface() Among the attriCVE-2024-269355.5In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix unremoved procfs host directory regression Commit fc66CVE-2024-269367.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate request buffer size in smb2_allocate_rsp_buf() The resCVE-2024-269375.5In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Reset queue_priority_hint on parking Originally, with strCVE-2024-269385.5In the Linux kernel, the following vulnerability has been resolved: drm/i915/bios: Tolerate devdata==NULL in intel_bios_encoder_supports_dpCVE-2024-269397.0In the Linux kernel, the following vulnerability has been resolved: drm/i915/vma: Fix UAF on destroy against retire race Object debugging CVE-2024-26948.8The Betheme theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 27.5.6 via deserialization of unCVE-2024-269405.5In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed TCVE-2024-269415.5In the Linux kernel, the following vulnerability has been resolved: drm/dp: Fix divide-by-zero regression on DP MST unplug with nouveau Fi
CVE-2024-26930: High severity, CVSS 7.8 | Vulnix