Linux Kernel SCSI qla2xxx Stale SRB Access Vulnerability Leading to Crash

A vulnerability in the Linux kernel's SCSI qla2xxx driver can cause a system crash by allowing stale SCSI Request Blocks (SRBs) to be accessed during I/O timeouts. This issue arises because the driver fails to properly return SRBs when escalating I/O timeout errors, leading to a kernel paging request failure. The crash stack indicates that the issue occurs while processing response queues, where the driver attempts to access pending SRB data that has become invalid due to a timeout.

Impact

Exploitation of this vulnerability leads to a kernel crash, causing a denial of service by interrupting normal system operations and potentially requiring a manual reboot to restore functionality.