Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Saurav Kashyap

Researcher fromMarvell
#33387of 53,639
7.8Total CVSS
Vulnerabilities · 1
PT-2024-3360
7.8
2024-03-10
Linux · Linux Kernel · CVE-2024-26930
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to a double free of the `ha->vp map` pointer in the Linux kernel's scsi: qla2xxx module. This occurs because `ha->vp map` is freed in both `qla2x00 mem alloc()` and `qla2x00 mem free(ha)`. Assigning NULL to `vp map` and using kfree to handle NULL can resolve this issue. The vulnerability may allow an attacker to cause a denial of service or have other impacts. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.