Linux Kernel SCSI qla2xxx Deletion Race Condition Vulnerability Leading to System Crash

A race condition vulnerability has been identified in the Linux kernel's SCSI qla2xxx driver, which can lead to a system crash when using a debug kernel. The issue arises from a deletion process that allows sessions to be queued for removal twice, causing corruption in the linked list management of sessions. This vulnerability affects the Linux kernel stable tree.

Impact

The vulnerability can cause a system crash due to linked list corruption, disrupting the normal operation of the SCSI qla2xxx driver.

Reproduction

The vulnerability can be reproduced by triggering the deletion of SCSI sessions in a way that allows the same session to be queued for deletion multiple times on different CPUs. This can be done by manipulating the session management process to bypass the safeguards that prevent double queuing.

Remediation

Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.