Linux Kernel SCSI qla2xxx Driver Lockless Command Completion Vulnerability

A vulnerability in the Linux kernel's SCSI qla2xxx driver allows for lockless command completion during the abort process. This issue was observed when adding or removing the controller, leading to a warning about a potential double free in the DMA mapping layer. The vulnerability arises because commands are completed while holding a lock, which can cause inconsistencies when the driver is unloaded.

Impact

The vulnerability could lead to a use-after-free condition, where memory is freed while still in use, potentially causing memory corruption or allowing for arbitrary code execution.