Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Nilesh Javali

Researcher fromMarvell
#19855of 60,568
15.6Total CVSS
Vulnerabilities · 2
High
2
PT-2024-36932
2024-11-15
7.8
CVE-2024-56623
Hewlett Packard
Hp Proliant Dl380P Gen8
A use-after-free issue has been resolved in the Linux kernel, specifically in the scsi: qla2xxx module. This issue occurs when the `dpc thread` is terminated using the `UNLOADING` flag and `kthread stop` simultaneously, causing a system crash with a stack trace warning of use-after-free. The `UNLOADING` flag is removed to terminate `dpc thread`, and `kthread stop` is used as the main signal to exit `dpc thread`. The issue is observed on HP ProLiant DL380p Gen8 systems with BIOS P70 08/20/2012.
PT-2024-29837
2024-07-10
7.8
CVE-2024-42288
Linux
Linux Kernel
The issue is related to a possible memory corruption in the scsi component of the Linux kernel, specifically in the qla2xxx module. The Init Control Block is dereferenced incorrectly, which can be exploited to potentially elevate privileges.