Linux · Linux Kernel · CVE-2021-46963
**Name of the Vulnerable Software and Affected Versions**
Linux kernel (affected versions not specified)
**Description**
The issue is related to a crash in the `qla2xxx mqueuecommand()` function. The problem arises from an incorrect call to free `srb` in `qla2xxx mqueuecommand()`, as `srb` is now allocated by upper layers. This fixes a smatch warning of `srb` unintended free. The call trace includes `qla2xxx mqueuecommand+0x2b5/0x2c0`, `scsi queue rq+0x5e2/0xa40`, ` blk mq try issue directly+0x128/0x1d0`, and `blk mq request issue directly+0x4e/0xb0`. The function `kmem cache free+0xfa/0x1b0` is also involved.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.