Security Advisory

CVE-2024-36025

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-05-30 15:07:30

Last updated 2026-05-11 20:15:51

Assigner Linux

State PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() The app_reply->elem[] array is allocated earlier in this function and it has app_req.num_ports elements. Thus this > comparison needs to be >= to prevent memory corruption.

← Browse all CVEs View on cve.org ↗