CVE-2024-36952

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-36952
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up There are cases after NPIV deletion where the fabric switch still believes the NPIV is logged into the fabric. This occurs when a vport is unregistered before the Remove All DA_ID CT and LOGO ELS are sent to the fabric. Currently fc_remove_host(), which calls dev_loss_tmo for all D_IDs including the fabric D_ID, removes the last ndlp reference and frees the ndlp rport object. This sometimes causes the race condition where the final DA_ID and LOGO are skipped from being sent to the fabric switch. Fix by moving the fc_remove_host() and scsi_remove_host() calls after DA_ID and LOGO are sent.

4.7 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.0 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0936809d968ecf81e0726fbd02ff2a5732d960c3 Patch
https://git.kernel.org/stable/c/4ddf01f2f1504fa08b766e8cfeec558e9f8eef6c Patch
https://git.kernel.org/stable/c/718602cd15f4c5710850090ea3066a89eeb46278 Patch
https://git.kernel.org/stable/c/76337eb8daee32bcc67742efab3168ed4ca299d0 Patch
https://git.kernel.org/stable/c/f2c7f029051edc4b394bb48edbe2297575abefe0 Patch
https://git.kernel.org/stable/c/0936809d968ecf81e0726fbd02ff2a5732d960c3 Patch
https://git.kernel.org/stable/c/4ddf01f2f1504fa08b766e8cfeec558e9f8eef6c Patch
https://git.kernel.org/stable/c/718602cd15f4c5710850090ea3066a89eeb46278 Patch
https://git.kernel.org/stable/c/76337eb8daee32bcc67742efab3168ed4ca299d0 Patch
https://git.kernel.org/stable/c/f2c7f029051edc4b394bb48edbe2297575abefe0 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
History

01 Oct 2025, 14:11

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/0936809d968ecf81e0726fbd02ff2a5732d960c3 - () https://git.kernel.org/stable/c/0936809d968ecf81e0726fbd02ff2a5732d960c3 - Patch
References () https://git.kernel.org/stable/c/4ddf01f2f1504fa08b766e8cfeec558e9f8eef6c - () https://git.kernel.org/stable/c/4ddf01f2f1504fa08b766e8cfeec558e9f8eef6c - Patch
References () https://git.kernel.org/stable/c/718602cd15f4c5710850090ea3066a89eeb46278 - () https://git.kernel.org/stable/c/718602cd15f4c5710850090ea3066a89eeb46278 - Patch
References () https://git.kernel.org/stable/c/76337eb8daee32bcc67742efab3168ed4ca299d0 - () https://git.kernel.org/stable/c/76337eb8daee32bcc67742efab3168ed4ca299d0 - Patch
References () https://git.kernel.org/stable/c/f2c7f029051edc4b394bb48edbe2297575abefe0 - () https://git.kernel.org/stable/c/f2c7f029051edc4b394bb48edbe2297575abefe0 - Patch
CWE CWE-459
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 4.7
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
First Time Linux linux Kernel
Linux

21 Nov 2024, 09:22

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/0936809d968ecf81e0726fbd02ff2a5732d960c3 - () https://git.kernel.org/stable/c/0936809d968ecf81e0726fbd02ff2a5732d960c3 -
References () https://git.kernel.org/stable/c/4ddf01f2f1504fa08b766e8cfeec558e9f8eef6c - () https://git.kernel.org/stable/c/4ddf01f2f1504fa08b766e8cfeec558e9f8eef6c -
References () https://git.kernel.org/stable/c/718602cd15f4c5710850090ea3066a89eeb46278 - () https://git.kernel.org/stable/c/718602cd15f4c5710850090ea3066a89eeb46278 -
References () https://git.kernel.org/stable/c/76337eb8daee32bcc67742efab3168ed4ca299d0 - () https://git.kernel.org/stable/c/76337eb8daee32bcc67742efab3168ed4ca299d0 -
References () https://git.kernel.org/stable/c/f2c7f029051edc4b394bb48edbe2297575abefe0 - () https://git.kernel.org/stable/c/f2c7f029051edc4b394bb48edbe2297575abefe0 -
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: scsi: lpfc: Mover la anulación del registro de transporte de NPIV a después de la limpieza de recursos. Hay casos después de la eliminación de NPIV en los que el conmutador de tejido todavía cree que el NPIV está registrado en el tejido. Esto ocurre cuando se cancela el registro de un vport antes de que Remove All DA_ID CT y LOGO ELS se envíen a la estructura. Actualmente, fc_remove_host(), que llama a dev_loss_tmo para todos los D_ID, incluido el D_ID de tejido, elimina la última referencia de ndlp y libera el objeto de informe de ndlp. Esto a veces provoca la condición de ejecución en la que el DA_ID y el LOGO finales no se envían al conmutador de estructura. Para solucionarlo, mueva las llamadas fc_remove_host() y scsi_remove_host() después de enviar DA_ID y LOGO.

30 May 2024, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-30 16:15

Updated : 2025-10-01 14:11

NVD link : CVE-2024-36952

Mitre link : CVE-2024-36952

CVE.ORG link : CVE-2024-36952

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-459

Incomplete Cleanup