---
id: CVE-2024-24855
title: >-
  Race condition vulnerability in Linux kernel scsi device driver
  lpfc_unregister_fcf_rescan()
summary: >+
  A race condition was found in the Linux kernel's scsi device driver in
  lpfc_unregister_fcf_rescan() function. This can result in a null pointer
  dereference issue, possibly leading to a kernel panic or denial of service
  issue.




severity: medium
cvss: 5
cvssVector: 'CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:H'
cvssSource: cna
cwe:
  - CWE-362
vendor: Linux
product: kernel
affected:
  - kernel >= v2.6.34-rc2 < v6.5-rc2
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2024-02-06T16:37:53.304176Z'
published: '2024-02-05'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T00:38:06.360Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2024-24855'
references:
  - url: 'https://bugzilla.openanolis.cn/show_bug.cgi?id=8149'
tags:
  - cve.org
epss: 0.00183
epssPercentile: 0.07784
ingestedAt: '2026-10-15T04:46:37.303Z'
---

## Overview

A race condition was found in the Linux kernel's scsi device driver in lpfc_unregister_fcf_rescan() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue.






## Affected

- `kernel >= v2.6.34-rc2 < v6.5-rc2`

## Remediation

 https://github.com/torvalds/linux/commit/0e881c0a4b614 https://github.com/torvalds/linux/commit/0e881c0a4b614