---
id: CVE-2022-50493
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  scsi: qla2xxx: Fix crash when I/O abort times out

  While performing CPU hotplug, a crash with the following stack was seen:

  Call Trace:
       qla24xx_process_response_q…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  scsi: qla2xxx: Fix crash when I/O abort times out

  While performing CPU hotplug, a crash with the following stack was seen:

  Call Trace:
       qla24xx_process_response_q…
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-820
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 5.3.17, < 5.4'
  - 'linux_kernel >= 5.4.4, < 5.15.86'
  - 'linux_kernel >= 5.16, < 6.0.16'
  - 'linux_kernel >= 6.1, < 6.1.2'
patched:
  - linux_kernel 6.1.2
published: '2025-10-04'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T22:17:31.350'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2022-50493'
references:
  - url: 'https://git.kernel.org/stable/c/05382ed9142cf8a8a3fb662224477eecc415778b'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/5f730e489e741c28fe6a5b3308e33c094462acb0'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/68ad83188d782b2ecef2e41ac245d27e0710fe8e'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/cb4dff498468b62e8c520568559b3a9007e104d7'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/d3871af13aa03fbbe7fbb812eaf140501229a72e'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-50493.json
  - url: 'https://access.redhat.com/security/cve/CVE-2022-50493'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2401516'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2022-50493'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2022-50493'
  - url: >-
      https://lore.kernel.org/linux-cve-announce/2025100418-CVE-2022-50493-2b70@gregkh/T
  - url: 'https://access.redhat.com/errata/RHSA-2023:4130'
  - url: 'https://access.redhat.com/errata/RHSA-2023:2951'
tags:
  - nvd
  - csaf
  - vex
  - red-hat
  - cve.org
  - score-dispute
epss: 0.00238
epssPercentile: 0.14819
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-15T21:31:36.546420Z'
scores:
  nvd: 8.8
  vendor: 4
  cna: 8.8
ingestedAt: '2026-10-15T22:48:25.377Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Fix crash when I/O abort times out

While performing CPU hotplug, a crash with the following stack was seen:

Call Trace:
     qla24xx_process_response_queue+0x42a/0x970 [qla2xxx]
     qla2x00_start_nvme_mq+0x3a2/0x4b0 [qla2xxx]
     qla_nvme_post_cmd+0x166/0x240 [qla2xxx]
     nvme_fc_start_fcp_op.part.0+0x119/0x2e0 [nvme_fc]
     blk_mq_dispatch_rq_list+0x17b/0x610
     __blk_mq_sched_dispatch_requests+0xb0/0x140
     blk_mq_sched_dispatch_requests+0x30/0x60
     __blk_mq_run_hw_queue+0x35/0x90
     __blk_mq_delay_run_hw_queue+0x161/0x180
     blk_execute_rq+0xbe/0x160
     __nvme_submit_sync_cmd+0x16f/0x220 [nvme_core]
     nvmf_connect_admin_queue+0x11a/0x170 [nvme_fabrics]
     nvme_fc_create_association.cold+0x50/0x3dc [nvme_fc]
     nvme_fc_connect_ctrl_work+0x19/0x30 [nvme_fc]
     process_one_work+0x1e8/0x3c0

On abort timeout, completion was called without checking if the I/O was
already completed.

Verify that I/O and abort request are indeed outstanding before attempting
completion.

## Affected

- `linux_kernel >= 5.3.17, < 5.4`
- `linux_kernel >= 5.4.4, < 5.15.86`
- `linux_kernel >= 5.16, < 6.0.16`
- `linux_kernel >= 6.1, < 6.1.2`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.1.2`

## Vendor advisories

- **RHSA-2023:4130** · Red Hat · fixed in: Red Hat Virtualization 4 Hypervisor for RHEL 8, Red Hat Enterprise Linux BaseOS EUS (v.8.6), Red Hat CodeReady Linux Builder EUS (v.8.6) · released 2023-07-18 · [advisory](https://access.redhat.com/errata/RHSA-2023:4130)
- **RHSA-2023:2951** · Red Hat · fixed in: Red Hat Enterprise Linux BaseOS (v. 8), Red Hat Enterprise Linux CRB (v. 8) · released 2023-05-16 · [advisory](https://access.redhat.com/errata/RHSA-2023:2951)
- **Red Hat VEX** · Moderate · affected: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 · no fix planned: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 · updated 2026-10-16 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-50493.json)