PT-2024-1601 · Linux+6 · Linux Kernel+6

Shiloong + 1 · Published 2024-02-05 · Updated 2026-03-14 · CVE-2024-24855

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Medium

Base vector

AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition was found in the Linux kernel's scsi device driver in the lpfc unregister fcf rescan() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

NULL Pointer Dereference

Race Condition

Weakness Enumeration

CWE-476

CWE-362

Related Identifiers

ALT-PU-2024-14046

ALT-PU-2024-6818

BDU:2024-01192

CVE-2024-24855

DLA-4193-1

DSA-5900-1

ECHO-CCDF-B443-E55F

OESA-2024-1344

OESA-2024-1346

OESA-2024-1392

SUSE-SU-2024:1643-1

SUSE-SU-2024:1646-1

SUSE-SU-2024:1870-1

USN-6699-1

USN-6700-1

USN-6700-2

USN-6701-1

USN-6701-2

USN-6701-3

USN-6701-4

USN-6702-1

USN-6702-2

USN-6704-1

USN-6704-2

USN-6704-3

USN-6704-4

USN-6705-1

USN-6716-1

Affected Products

Alt Linux

Astra Linux

Debian

Linuxmint

Linux Kernel

Suse

Ubuntu

References · 573

• https://ubuntu.com/security/notices/USN-6704-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-23000 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6700-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-26597 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-52458 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-46924 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-46935 · Security Note
• https://ubuntu.com/security/notices/USN-6704-2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47049 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-46955 · Security Note
• https://ubuntu.com/security/notices/USN-6701-2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47013 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-47024 · Security Note
• https://ubuntu.com/security/CVE-2023-4921 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-22995 · Vendor Advisory