THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2022-49159 (HIGH 8.8) — In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Implement ref count for SRB The timeout handler and the done function are racing. When qla2x00_async_iocb_timeout() starts to run it can be preempted by the normal response path (via the firmware

[NVD] CVE-2022-49159 (HIGH 8.8) — In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Implement ref count for SRB The timeout handler and the done function are racing. When qla2x00_async_iocb_timeout() starts to run it can be preempted by the normal response path (via the firmware

lownvdPublished 2025-02-26

CVE-2022-49159 CVSS: 8.8 HIGH Published: 2025-02-26T07:00:53.103

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Implement ref count for SRB

The timeout handler and the done function are racing. When qla2x00_async_iocb_timeout() starts to run it can be preempted by the normal response path (via the firmware?). qla24xx_async_gpsc_sp_done() releases the SRB unco

Indicators of compromise

CVE-2022-49159cve
50:06:0e:80:08:77:b6:21ipv6
20:45:00:27:f8:75:33:00ipv6

Original source: https://nvd.nist.gov/vuln/detail/CVE-2022-49159