{"id":"CVE-2024-24855","revision":"f6f4f1416c6d4aa3b1c340582b046f51","records":[{"revision":"f6f4f1416c6d4aa3b1c340582b046f51","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2024-24855","aliases":[],"title":"Race condition vulnerability in Linux kernel scsi device driver lpfc_unregister_fcf_rescan()","description":"A race condition was found in the Linux kernel's scsi device driver in lpfc_unregister_fcf_rescan() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue.\n\n\n\n\n","state":0,"publishedAt":"2024-02-05T07:25:41.568+00:00","modifiedAt":"2026-10-15T00:38:06.36+00:00","affected":[{"ecosystem":"https://kernel.org/","name":"kernel","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"collectionURL\": \"https://kernel.org/\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"modules\": [\n                        \"scsi\"\n                    ],\n                    \"packageName\": \"kernel\",\n                    \"platforms\": [\n                        \"Linux\",\n                        \"x86\",\n                        \"ARM\"\n                    ],\n                    \"product\": \"Linux kernel\",\n                    \"programFiles\": [\n                        \"https://gitee.com/anolis/cloud-kernel/blob/devel-5.10/drivers/scsi/lpfc/lpfc_hbadisc.c\"\n                    ],\n                    \"repo\": \"https://gitee.com/anolis/cloud-kernel.git\",\n                    \"vendor\": \"Linux\",\n                    \"versions\": [\n                        {\n                            \"lessThan\": \"v6.5-rc2\",\n                            \"status\": \"affected\",\n                            \"version\": \"v2.6.34-rc2\",\n                            \"versionType\": \"custom\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:H","score":5,"severity":"MEDIUM"}],"references":["https://bugzilla.openanolis.cn/show_bug.cgi?id=8149"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-24855","license":"CVE Program Terms of Use","key":"cve-program:CVE-2024-24855","identifiers":["CVE-2024-24855"]},"retained":false,"historicalAffected":[]}],"coverage":[]}