Back to search
CVE-2024-36025
Published: May 30, 2024
Modified: May 11, 2026
PUBLISHED
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() The app_reply->elem[] array is allocated earlier in this function and it has app_req.num_ports elements. Thus this > comparison needs to be >= to prevent memory corruption.
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected 7878f22a2e03b69baf792f74488962981a1c9547 - < 8c820f7c8e9b46238d277c575392fe9930207aabaffected 7878f22a2e03b69baf792f74488962981a1c9547 - < 9fc74e367be4247a5ac39bb8ec41eaa73fade510affected 7878f22a2e03b69baf792f74488962981a1c9547 - < 60b87b5ecbe07d70897d35947b0bb3e76ccd1b3aaffected 7878f22a2e03b69baf792f74488962981a1c9547 - < ea8ac95c22c93acecb710209a7fd10b851afe817affected 7878f22a2e03b69baf792f74488962981a1c9547 - < 4406e4176f47177f5e51b4cc7e6a7a2ff3dbfbbd |
Linux | Linux | affected 5.15unaffected 0 - < 5.15unaffected 5.15.156 - <= 5.15.*unaffected 6.1.87 - <= 6.1.*unaffected 6.6.28 - <= 6.6.*+2 more versions |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now