scsi: qla2xxx: Perform lockless command completion in abort path

{
  "id": "01cf605123f2eaa5589b8749d04bf80e8e331d205da6bbe194c6ebb5ed957e91",
  "url": "https://osv.dev/vulnerability/CVE-2023-53041",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "scsi: qla2xxx: Perform lockless command completion in abort path",
    "summary": "In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Perform lockless command completion in abort path While adding and removing the controller, the following call trace was observed: WARNING: CPU: 3 PID: 623596 at kernel/dma/mapping.c:532 dma_free_attrs+0x33/0x50 CPU: 3 PID: 623596 Comm: sh Kdump: loaded Not tainted 5.14.0-96.el9.x86_64 #1 RIP: 0010:dma_free_attrs+0x33/0x50 Call Trace: qla2x00_async_sns_sp_done+0x107/0x1b0 [qla2xxx] qla2x00_abort_srb+0x8e/0x250 [qla2xxx] ? ql_dbg+0x70/0x100 [qla2xxx] __qla2x00_abort_all_cmds+0x108/0x190 [qla2xxx] qla2x00_abort_all_cmds+0x24/0x70 [qla2xxx] qla2x00_abort_isp_cleanup+0x305/0x3e0 [qla2xxx] qla2x00_remove_one+0x364/0x400 [qla2xxx] pci_device_remove+0x36/0xa0 __device_release_driver+0x17a/0x230 device_release_driver+0x24/0x30 pci_stop_bus_device+0x68/0x90 pci_stop_and_remove_bus_device_locked+0x16/0x30 remove_store+0x75/0x90 kernfs_fop_write_iter+0x11c/0x1b0 new_sync_write+0x11f/0x1b0 vfs_write+0x1eb/0x280 ksys_write+0x5f/0xe0 do_syscall_64+0x5c/0x80 ? do_user_addr_fault+0x1d8/0x680 ? do_syscall_64+0x69/0x80 ? exc_page_fault+0x62/0x140 ? asm_exc_page_fault+0x8/0x30 entry_SYSCALL_64_after_hwframe+0x44/0xae The command was completed in the abort path during driver unload with a lock held, causing the warning in abort path. Hence complete the command without any lock held.",
    "evidence": "osv:CVE-2023-53041",
    "products": [
      {
        "name": {
          "value": "Kernel",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "5.4.240",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "5.10.177",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "5.15.105",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.1.22",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.2.9",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "CVE-2023-53041",
      "aliases": [
        "CVE-2023-53041"
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "31c1f455203e56a3ce8d5dd92f37c83d07bd5bd5"
                },
                {
                  "fixed": "9189f20b4c5307c0998682bb522e481b4567a8b8"
                }
              ]
            },
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "f45bca8c5052e8c59bab64ee90c44441678b9a52"
                },
                {
                  "fixed": "231cfa78ec5badd84a1a2b09465bfad1a926aba1"
                },
                {
                  "fixed": "d6f7377528d2abf338e504126e44439541be8f7d"
                },
                {
                  "fixed": "cd0a1804ac5bab2545ac700c8d0fe9ae9284c567"
                },
                {
                  "fixed": "415d614344a4f1bbddf55d724fc7eb9ef4b39aad"
                },
                {
                  "fixed": "0367076b0817d5c75dfb83001ce7ce5c64d803a9"
                }
              ]
            },
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "5.4.4"
                },
                {
                  "fixed": "5.4.240"
                }
              ]
            },
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "5.3.17"
                },
                {
                  "fixed": "5.4"
                }
              ]
            },
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "10fd34ac79b234d9bd4459c9b9c1f9d5a67f7bde"
                }
              ]
            }
          ],
          "versions": [
            "v5.4.239",
            "v5.4.238",
            "v5.4.237",
            "v5.4.236",
            "v5.4.235",
            "v5.4.234",
            "v5.4.233",
            "v5.4.232",
            "v5.4.231",
            "v5.4.230",
            "v5.4.229",
            "v5.4.228",
            "v5.4.227",
            "v5.4.226",
            "v5.4.225",
            "v5.4.224",
            "v5.4.223",
            "v5.4.222",
            "v5.4.221",
            "v5.4.220",
            "v5.4.219",
            "v5.4.218",
            "v5.4.217",
            "v5.4.216",
            "v5.4.215",
            "v5.4.214",
            "v5.4.213",
            "v5.4.212",
            "v5.4.211",
            "v5.4.210",
            "v5.4.209",
            "v5.4.208",
            "v5.4.207",
            "v5.4.206",
            "v5.4.205",
            "v5.4.204",
            "v5.4.203",
            "v5.4.202",
            "v5.4.201",
            "v5.4.200",
            "v5.4.199",
            "v5.4.198",
            "v5.4.197",
            "v5.4.196",
            "v5.4.195",
            "v5.4.194",
            "v5.4.193",
            "v5.4.192",
            "v5.4.191",
            "v5.4.190",
            "v5.4.189",
            "v5.4.188",
            "v5.4.187",
            "v5.4.186",
            "v5.4.185",
            "v5.4.184",
            "v5.4.183",
            "v5.4.182",
            "v5.4.181",
            "v5.4.180",
            "v5.4.179",
            "v5.4.178",
            "v5.4.177",
            "v5.4.176",
            "v5.4.175",
            "v5.4.174",
            "v5.4.173",
            "v5.4.172",
            "v5.4.171",
            "v5.4.170",
            "v5.4.169",
            "v5.4.168",
            "v5.4.167",
            "v5.4.166",
            "v5.4.165",
            "v5.4.164",
            "v5.4.163",
            "v5.4.162",
            "v5.4.161",
            "v5.4.160",
            "v5.4.159",
            "v5.4.158",
            "v5.4.157",
            "v5.4.156",
            "v5.4.155",
            "v5.4.154",
            "v5.4.153",
            "v5.4.152",
            "v5.4.151",
            "v5.4.150",
            "v5.4.149",
            "v5.4.148",
            "v5.4.147",
            "v5.4.146",
            "v5.4.145",
            "v5.4.144",
            "v5.4.143",
            "v5.4.142",
            "v5.4.141",
            "v5.4.140",
            "v5.4.139",
            "v5.4.138",
            "v5.4.137",
            "v5.4.136",
            "v5.4.135",
            "v5.4.134",
            "v5.4.133",
            "v5.4.132",
            "v5.4.131",
            "v5.4.130",
            "v5.4.129",
            "v5.4.128",
            "v5.4.127",
            "v5.4.126",
            "v5.4.125",
            "v5.4.124",
            "v5.4.123",
            "v5.4.122",
            "v5.4.121",
            "v5.4.120",
            "v5.4.119",
            "v5.4.118",
            "v5.4.117",
            "v5.4.116",
            "v5.4.115",
            "v5.4.114",
            "v5.4.113",
            "v5.4.112",
            "v5.4.111",
            "v5.4.110",
            "v5.4.109",
            "v5.4.108",
            "v5.4.107",
            "v5.4.106",
            "v5.4.105",
            "v5.4.104",
            "v5.4.103",
            "v5.4.102",
            "v5.4.101",
            "v5.4.100",
            "v5.4.99",
            "v5.4.98",
            "v5.4.97",
            "v5.4.96",
            "v5.4.95",
            "v5.4.94",
            "v5.4.93",
            "v5.4.92",
            "v5.4.91",
            "v5.4.90",
            "v5.4.89",
            "v5.4.88",
            "v5.4.87",
            "v5.4.86",
            "v5.4.85",
            "v5.4.84",
            "v5.4.83",
            "v5.4.82",
            "v5.4.81",
            "v5.4.80",
            "v5.4.79",
            "v5.4.78",
            "v5.4.77",
            "v5.4.76",
            "v5.4.75",
            "v5.4.74",
            "v5.4.73",
            "v5.4.72",
            "v5.4.71",
            "v5.4.70",
            "v5.4.69",
            "v5.4.68",
            "v5.4.67",
            "v5.4.66",
            "v5.4.65",
            "v5.4.64",
            "v5.4.63",
            "v5.4.62",
            "v5.4.61",
            "v5.4.60",
            "v5.4.59",
            "v5.4.58",
            "v5.4.57",
            "v5.4.56",
            "v5.4.55",
            "v5.4.54",
            "v5.4.53",
            "v5.4.52",
            "v5.4.51",
            "v5.4.50",
            "v5.4.49",
            "v5.4.48",
            "v5.4.47",
            "v5.4.46",
            "v5.4.45",
            "v5.4.44",
            "v5.4.43",
            "v5.4.42",
            "v5.4.41",
            "v5.4.40",
            "v5.4.39",
            "v5.4.38",
            "v5.4.37",
            "v5.4.36",
            "v5.4.35",
            "v5.4.34",
            "v5.4.33",
            "v5.4.32",
            "v5.4.31",
            "v5.4.30",
            "v5.4.29",
            "v5.4.28",
            "v5.4.27",
            "v5.4.26",
            "v5.4.25",
            "v5.4.24",
            "v5.4.23",
            "v5.4.22",
            "v5.4.21",
            "v5.4.20",
            "v5.4.19",
            "v5.4.18",
            "v5.4.17",
            "v5.4.16",
            "v5.4.15",
            "v5.4.14",
            "v5.4.13",
            "v5.4.12",
            "v5.4.11",
            "v5.4.10",
            "v5.4.9",
            "v5.4.8",
            "v5.4.7",
            "v5.4.6",
            "v5.4.5",
            "v5.4.4",
            "v5.3.18",
            "v5.3.17"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53041.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "5.4.240"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.5.0"
                },
                {
                  "fixed": "5.10.177"
                },
                {
                  "fixed": "5.15.105"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.11.0"
                },
                {
                  "fixed": "6.1.22"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.16.0"
                },
                {
                  "fixed": "6.2.9"
                }
              ]
            }
          ],
          "package": {
            "name": "Kernel",
            "ecosystem": "Linux"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53041.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:22.491631773Z",
      "provider": "osv",
      "references": [
        "https://git.kernel.org/stable/c/0367076b0817d5c75dfb83001ce7ce5c64d803a9",
        "https://git.kernel.org/stable/c/231cfa78ec5badd84a1a2b09465bfad1a926aba1",
        "https://git.kernel.org/stable/c/415d614344a4f1bbddf55d724fc7eb9ef4b39aad",
        "https://git.kernel.org/stable/c/9189f20b4c5307c0998682bb522e481b4567a8b8",
        "https://git.kernel.org/stable/c/cd0a1804ac5bab2545ac700c8d0fe9ae9284c567",
        "https://git.kernel.org/stable/c/d6f7377528d2abf338e504126e44439541be8f7d",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53041.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2023-53041",
        "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
      ],
      "provider_metadata": {
        "cna_assigner": "Linux",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53041.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2023-53041",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 488467,
  "published_at": "2025-05-02T15:54:59.21+00:00"
}