{"id":"CVE-2024-24855","title":"Race condition vulnerability in Linux kernel scsi device driver lpfc_unregister_fcf_rescan()","summary":"A race condition was found in the Linux kernel's scsi device driver in lpfc_unregister_fcf_rescan() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue.\n\n\n\n\n","severity":"medium","cvss":5,"cvssVector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:H","cvssSource":"cna","cwe":["CWE-362"],"vendor":"Linux","product":"kernel","affected":["kernel >= v2.6.34-rc2 < v6.5-rc2"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2024-02-06T16:37:53.304176Z"},"published":"2024-02-05","updated":"2026-10-15","sourceUpdated":"2026-10-15T00:38:06.360Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-24855","references":[{"url":"https://bugzilla.openanolis.cn/show_bug.cgi?id=8149"}],"tags":["cve.org"],"epss":0.00183,"epssPercentile":0.07784,"ingestedAt":"2026-10-15T04:46:37.303Z","slug":"CVE-2024-24855","body":"## Overview\n\nA race condition was found in the Linux kernel's scsi device driver in lpfc_unregister_fcf_rescan() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue.\n\n\n\n\n\n\n## Affected\n\n- `kernel >= v2.6.34-rc2 < v6.5-rc2`\n\n## Remediation\n\n https://github.com/torvalds/linux/commit/0e881c0a4b614 https://github.com/torvalds/linux/commit/0e881c0a4b614","depth":"sunlit","depthScore":28,"depthScoreParts":{"impact":27.5,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}