CVE-2024-26742— scsi: smartpqi: Fix disable_managed_interrupts
Quick assessment
Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于禁用管理中断。
Possible ATT&CK Techniques 1 AI
T1059 · Command and Scripting InterpreterAffected Version Matrix 10
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | cf15c3e734e8d25de7b4d9170f5a69ace633a583< 3c31b18a8dd8b7bf36af1cd723d455853b8f94fe |
affected |
cf15c3e734e8d25de7b4d9170f5a69ace633a583< 4f5b15c15e6016efb3e14582d02cc4ddf57227df |
affected | ||
cf15c3e734e8d25de7b4d9170f5a69ace633a583< b9433b25cb06c415c9cb24782599649a406c8d6d |
affected | ||
cf15c3e734e8d25de7b4d9170f5a69ace633a583< 5761eb9761d2d5fe8248a9b719efc4d8baf1f24a |
affected | ||
6.0 |
affected | ||
< 6.0 |
unaffected | ||
6.1.80≤ 6.1.* |
unaffected | ||
6.6.19≤ 6.6.* |
unaffected | ||
| … +2 more rows | |||
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2024-26742
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
scsi: smartpqi: Fix disable_managed_interrupts
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved:
scsi: smartpqi: Fix disable_managed_interrupts
Correct blk-mq registration issue with module parameter
disable_managed_interrupts enabled.
When we turn off the default PCI_IRQ_AFFINITY flag, the driver needs to
register with blk-mq using blk_mq_map_queues(). The driver is currently
calling blk_mq_pci_map_queues() which results in a stack trace and possibly
undefined behavior.
Stack Trace:
[ 7.860089] scsi host2: smartpqi
[ 7.871934] WARNING: CPU: 0 PID: 238 at block/blk-mq-pci.c:52 blk_mq_pci_map_queues+0xca/0xd0
[ 7.889231] Modules linked in: sd_mod t10_pi sg uas smartpqi(+) crc32c_intel scsi_transport_sas usb_storage dm_mirror dm_region_hash dm_log dm_mod ipmi_devintf ipmi_msghandler fuse
[ 7.924755] CPU: 0 PID: 238 Comm: kworker/0:3 Not tainted 4.18.0-372.88.1.el8_6_smartpqi_test.x86_64 #1
[ 7.944336] Hardware name: HPE ProLiant DL380 Gen10/ProLiant DL380 Gen10, BIOS U30 03/08/2022
[ 7.963026] Workqueue: events work_for_cpu_fn
[ 7.978275] RIP: 0010:blk_mq_pci_map_queues+0xca/0xd0
[ 7.978278] Code: 48 89 de 89 c7 e8 f6 0f 4f 00 3b 05 c4 b7 8e 01 72 e1 5b 31 c0 5d 41 5c 41 5d 41 5e 41 5f e9 7d df 73 00 31 c0 e9 76 df 73 00 <0f> 0b eb bc 90 90 0f 1f 44 00 00 41 57 49 89 ff 41 56 41 55 41 54
[ 7.978280] RSP: 0018:ffffa95fc3707d50 EFLAGS: 00010216
[ 7.978283] RAX: 00000000ffffffff RBX: 0000000000000000 RCX: 0000000000000010
[ 7.978284] RDX: 0000000000000004 RSI: 0000000000000000 RDI: ffff9190c32d4310
[ 7.978286] RBP: 0000000000000000 R08: ffffa95fc3707d38 R09: ffff91929b81ac00
[ 7.978287] R10: 0000000000000001 R11: ffffa95fc3707ac0 R12: 0000000000000000
[ 7.978288] R13: ffff9190c32d4000 R14: 00000000ffffffff R15: ffff9190c4c950a8
[ 7.978290] FS: 0000000000000000(0000) GS:ffff9193efc00000(0000) knlGS:0000000000000000
[ 7.978292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 8.172814] CR2: 000055d11166c000 CR3: 00000002dae10002 CR4: 00000000007706f0
[ 8.172816] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 8.172817] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 8.172818] PKRU: 55555554
[ 8.172819] Call Trace:
[ 8.172823] blk_mq_alloc_tag_set+0x12e/0x310
[ 8.264339] scsi_add_host_with_dma.cold.9+0x30/0x245
[ 8.279302] pqi_ctrl_init+0xacf/0xc8e [smartpqi]
[ 8.294085] ? pqi_pci_probe+0x480/0x4c8 [smartpqi]
[ 8.309015] pqi_pci_probe+0x480/0x4c8 [smartpqi]
[ 8.323286] local_pci_probe+0x42/0x80
[ 8.337855] work_for_cpu_fn+0x16/0x20
[ 8.351193] process_one_work+0x1a7/0x360
[ 8.364462] ? create_worker+0x1a0/0x1a0
[ 8.379252] worker_thread+0x1ce/0x390
[ 8.392623] ? create_worker+0x1a0/0x1a0
[ 8.406295] kthread+0x10a/0x120
[ 8.418428] ? set_kthread_struct+0x50/0x50
[ 8.431532] ret_from_fork+0x1f/0x40
[ 8.444137] ---[ end trace 1bf0173d39354506 ]---
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于禁用管理中断。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2024-26742
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-26742
请登录查看更多情报信息。
Other References for CVE-2024-26742 (3)
Same Patch Batch · Linux · 2024-04-03 · 94 CVEs total
| CVE-2024-26760 | 9.8 CRITICAL | scsi: target: pscsi: Fix bio_put() for error case |
| CVE-2024-26689 | 8.8 HIGH | ceph: prevent use-after-free in encode_cap_msg() |
| CVE-2024-26779 | 8.8 HIGH | wifi: mac80211: fix race condition on enabling fast-xmit |
| CVE-2024-26692 | 8.3 HIGH | smb: Fix regression in writes when non-standard maximum write size negotiated |
| CVE-2024-26736 | 8.1 HIGH | afs: Increase buffer size in afs_update_volume_status() |
| CVE-2024-26737 | 7.8 HIGH | bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel |
| CVE-2024-26739 | 7.8 HIGH | net/sched: act_mirred: don't override retval if we already lost the skb |
| CVE-2023-52637 | 7.8 HIGH | can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) |
| CVE-2024-26728 | 7.8 HIGH | drm/amd/display: fix null-pointer dereference on edid reading |
| CVE-2024-26748 | 7.8 HIGH | usb: cdns3: fix memory double free when handle zero packet |
| CVE-2024-26712 | 7.8 HIGH | powerpc/kasan: Fix addr error caused by page alignment |
| CVE-2024-26718 | 7.8 HIGH | dm-crypt, dm-verity: disable tasklets |
| CVE-2024-26759 | 7.8 HIGH | mm/swap: fix race when skipping swapcache |
| CVE-2024-26762 | 7.8 HIGH | cxl/pci: Skip to handle RAS errors if CXL.mem device is detached |
| CVE-2024-26706 | 7.8 HIGH | parisc: Fix random data corruption from exception handler |
| CVE-2024-26704 | 7.8 HIGH | ext4: fix double-free of blocks due to wrong extents moved_len |
| CVE-2024-26766 | 7.8 HIGH | IB/hfi1: Fix sdma.h tx->num_descs off-by-one error |
| CVE-2024-26773 | 7.8 HIGH | ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() |
| CVE-2024-26699 | 7.8 HIGH | drm/amd/display: Fix array-index-out-of-bounds in dcn35_clkmgr |
| CVE-2024-26697 | 7.8 HIGH | nilfs2: fix data corruption in dsync block recovery for small block sizes |
Showing top 20 of 94 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Linux
-
CVE-2026-98384
bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destr -
CVE-2026-98383
bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL -
CVE-2026-98382
bpf: Reject dev-bound-only programs on other devices -
CVE-2026-98381
veth: manage XDP program pointers during channel resize -
CVE-2026-98380
net/sched: reject IDR error pointers when deleting actions
Same vendor: Linux
-
CVE-2026-98384
bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destr -
CVE-2026-98383
bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL -
CVE-2026-98382
bpf: Reject dev-bound-only programs on other devices -
CVE-2026-98381
veth: manage XDP program pointers during channel resize -
CVE-2026-98380
net/sched: reject IDR error pointers when deleting actions
V. Comments for CVE-2024-26742
No comments yet