Deletion Race Condition in Linux Kernel Affecting SCSI QLA2XXX Driver

CVE-2023-53615

What is CVE-2023-53615?

A vulnerability in the Linux kernel's SCSI QLA2XXX driver allows session deletions to be queued up multiple times, leading to link list corruption and potential system crashes when using a debug kernel. This issue arises because the deletion of the same session can be triggered on different CPU threads, causing a race condition. The bug has been addressed by adjusting the handling of the deleted flag, ensuring more reliable session management.

References