Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Quinn Tran

Researcher fromMarvell
#22327of 60,568
13.8Total CVSS
Vulnerabilities · 2
Medium
1
High
1
PT-2024-36932
2024-11-15
7.8
CVE-2024-56623
Hewlett Packard
Hp Proliant Dl380P Gen8
A use-after-free issue has been resolved in the Linux kernel, specifically in the scsi: qla2xxx module. This issue occurs when the `dpc thread` is terminated using the `UNLOADING` flag and `kthread stop` simultaneously, causing a system crash with a stack trace warning of use-after-free. The `UNLOADING` flag is removed to terminate `dpc thread`, and `kthread stop` is used as the main signal to exit `dpc thread`. The issue is observed on HP ProLiant DL380p Gen8 systems with BIOS P70 08/20/2012.
PT-2025-8084
2022-01-24
6.0
CVE-2022-49156
Linux
Linux Kernel
A vulnerability in the Linux kernel has been resolved. The issue occurs in the scsi: qla2xxx driver, where a call to the midlayer function `fc remote port delete` can put the thread to sleep while in interrupt context, triggering a crash. The problem arises from scheduling while atomic. To address this, the call is scheduled in non-interrupt context for safety.