{"id":"CVE-2022-50493","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Fix crash when I/O abort times out\n\nWhile performing CPU hotplug, a crash with the following stack was seen:\n\nCall Trace:\n     qla24xx_process_response_q…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Fix crash when I/O abort times out\n\nWhile performing CPU hotplug, a crash with the following stack was seen:\n\nCall Trace:\n     qla24xx_process_response_q…","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-820"],"vendor":"linux","product":"linux_kernel","affected":["linux_kernel >= 5.3.17, < 5.4","linux_kernel >= 5.4.4, < 5.15.86","linux_kernel >= 5.16, < 6.0.16","linux_kernel >= 6.1, < 6.1.2"],"patched":["linux_kernel 6.1.2"],"published":"2025-10-04","updated":"2026-10-15","sourceUpdated":"2026-10-15T22:17:31.350","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2022-50493","references":[{"url":"https://git.kernel.org/stable/c/05382ed9142cf8a8a3fb662224477eecc415778b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/5f730e489e741c28fe6a5b3308e33c094462acb0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/68ad83188d782b2ecef2e41ac245d27e0710fe8e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/cb4dff498468b62e8c520568559b3a9007e104d7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/d3871af13aa03fbbe7fbb812eaf140501229a72e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-50493.json"},{"url":"https://access.redhat.com/security/cve/CVE-2022-50493"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2401516"},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-50493"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-50493"},{"url":"https://lore.kernel.org/linux-cve-announce/2025100418-CVE-2022-50493-2b70@gregkh/T"},{"url":"https://access.redhat.com/errata/RHSA-2023:4130"},{"url":"https://access.redhat.com/errata/RHSA-2023:2951"}],"tags":["nvd","csaf","vex","red-hat","cve.org","score-dispute"],"epss":0.00238,"epssPercentile":0.14819,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-15T21:31:36.546420Z"},"scores":{"nvd":8.8,"vendor":4,"cna":8.8},"ingestedAt":"2026-10-15T22:48:25.377Z","slug":"CVE-2022-50493","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Fix crash when I/O abort times out\n\nWhile performing CPU hotplug, a crash with the following stack was seen:\n\nCall Trace:\n     qla24xx_process_response_queue+0x42a/0x970 [qla2xxx]\n     qla2x00_start_nvme_mq+0x3a2/0x4b0 [qla2xxx]\n     qla_nvme_post_cmd+0x166/0x240 [qla2xxx]\n     nvme_fc_start_fcp_op.part.0+0x119/0x2e0 [nvme_fc]\n     blk_mq_dispatch_rq_list+0x17b/0x610\n     __blk_mq_sched_dispatch_requests+0xb0/0x140\n     blk_mq_sched_dispatch_requests+0x30/0x60\n     __blk_mq_run_hw_queue+0x35/0x90\n     __blk_mq_delay_run_hw_queue+0x161/0x180\n     blk_execute_rq+0xbe/0x160\n     __nvme_submit_sync_cmd+0x16f/0x220 [nvme_core]\n     nvmf_connect_admin_queue+0x11a/0x170 [nvme_fabrics]\n     nvme_fc_create_association.cold+0x50/0x3dc [nvme_fc]\n     nvme_fc_connect_ctrl_work+0x19/0x30 [nvme_fc]\n     process_one_work+0x1e8/0x3c0\n\nOn abort timeout, completion was called without checking if the I/O was\nalready completed.\n\nVerify that I/O and abort request are indeed outstanding before attempting\ncompletion.\n\n## Affected\n\n- `linux_kernel >= 5.3.17, < 5.4`\n- `linux_kernel >= 5.4.4, < 5.15.86`\n- `linux_kernel >= 5.16, < 6.0.16`\n- `linux_kernel >= 6.1, < 6.1.2`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 6.1.2`\n\n## Vendor advisories\n\n- **RHSA-2023:4130** · Red Hat · fixed in: Red Hat Virtualization 4 Hypervisor for RHEL 8, Red Hat Enterprise Linux BaseOS EUS (v.8.6), Red Hat CodeReady Linux Builder EUS (v.8.6) · released 2023-07-18 · [advisory](https://access.redhat.com/errata/RHSA-2023:4130)\n- **RHSA-2023:2951** · Red Hat · fixed in: Red Hat Enterprise Linux BaseOS (v. 8), Red Hat Enterprise Linux CRB (v. 8) · released 2023-05-16 · [advisory](https://access.redhat.com/errata/RHSA-2023:2951)\n- **Red Hat VEX** · Moderate · affected: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 · no fix planned: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 · updated 2026-10-16 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-50493.json)","depth":"twilight","depthScore":48,"depthScoreParts":{"impact":48.4,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":230079,"id":"CVE-2022-50493","ts":1793124780452,"field":"cvss","old":"4","new":"8.8"},{"seq":230078,"id":"CVE-2022-50493","ts":1793124780452,"field":"severity","old":"medium","new":"high"},{"seq":223777,"id":"CVE-2022-50493","ts":1792238401834,"field":"cvss","old":"8.8","new":"4"},{"seq":223776,"id":"CVE-2022-50493","ts":1792238401834,"field":"severity","old":"high","new":"medium"}]}