CVE Feed

    Dashboard / CVE / CVE-2021-46963

    CVE-2021-46963

    In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix crash in qla2xxx_mqueuecommand() RIP: 0010:kmem_cache_free+0xfa/0x1b0 Call Trace: qla2xxx_mqueuecommand+0x2b5/0x2c0 [qla2xxx] scsi_queue_rq+0x5e2/0xa40 __blk_mq_try_issue_directly+0x128/0x1d0 blk_mq_request_issue_directly+0x4e/0xb0 Fix incorrect call to free srb in qla2xxx_mqueuecommand(), as srb is now allocated by upper layers. This fixes smatch warning of srb unintended free.

    Published:Feb 27, 2024
    Last Modified:Aug 4, 2026
    EPS:Feb 27, 2024
    EPSS Score:0.00236
    CVSS Score:7.8

    Affected Products

    Vendor
    Linux
    Product
    Linux Kernel

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-416 Use After Free

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-80925 — In the Linux kernel, the following vulnerability has been resolved: vlan: fix skb_under_panic and races when …
    CVE-2026-80924 (CVSS 7.5) — In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - use kfree_sensitive() for …
    CVE-2026-80923 — In the Linux kernel, the following vulnerability has been resolved: xhci: dbgtty: Fix unregister on tty_regis…
    CVE-2026-80922 — In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random…
    CVE-2026-80921 (CVSS 8.8) — In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: zero stale crypto bits …
    CVE-2026-80920 — In the Linux kernel, the following vulnerability has been resolved: io_uring: defer eventfd signaling when qu…
    CVE-2026-80919 — In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix recursive ww_mutex acquir…
    CVE-2026-80918 — In the Linux kernel, the following vulnerability has been resolved: HID: core: fix number/pointer type confus…
    CVE-2026-80917 — In the Linux kernel, the following vulnerability has been resolved: PCI: host-generic: Fix NULL pointer deref…
    CVE-2026-80916 — In the Linux kernel, the following vulnerability has been resolved: kcov: fix data corruption and race condit…

    References

    https://git.kernel.org/stable/c/6641df81ab799f28a5d564f860233dd26cca0d93
    https://git.kernel.org/stable/c/702cdaa2c6283c135ef16d52e0e4e3c1005aa538
    https://git.kernel.org/stable/c/77509a238547863040a42d57c72403f7d4c89a8f
    https://git.kernel.org/stable/c/80ef24175df2cba3860d0369d1c662b49ee2de56
    https://git.kernel.org/stable/c/a73208e3244127ef9f2cdf24e4adb947aaa32053
    https://git.kernel.org/stable/c/c5ab9b67d8b061de74e2ca51bf787ee599bd7f89
    https://git.kernel.org/stable/c/6641df81ab799f28a5d564f860233dd26cca0d93
    https://git.kernel.org/stable/c/702cdaa2c6283c135ef16d52e0e4e3c1005aa538
    https://git.kernel.org/stable/c/77509a238547863040a42d57c72403f7d4c89a8f
    https://git.kernel.org/stable/c/80ef24175df2cba3860d0369d1c662b49ee2de56
    https://git.kernel.org/stable/c/a73208e3244127ef9f2cdf24e4adb947aaa32053
    https://git.kernel.org/stable/c/c5ab9b67d8b061de74e2ca51bf787ee599bd7f89

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High