Beveiligingsadvies

CVE-2024-36025

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-05-30 15:07:30
Laatst bijgewerkt 2026-05-11 20:15:51
Toegewezen door Linux
CVSS-score geen score
Status PUBLISHED

Beschrijving

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() The app_reply->elem[] array is allocated earlier in this function and it has app_req.num_ports elements. Thus this > comparison needs to be >= to prevent memory corruption.