CVE-2022-49159

CVE-2022-49159 is a race condition vulnerability in the Linux kernel's qla2xxx SCSI driver, which manages QLogic Fibre Channel Host Bus Adapters (HBAs). This flaw can lead to kernel crashes or denial of service (DoS) by causing a NULL pointer dereference.

This vulnerability is rated as Moderate impact because it requires local execution privileges on a host equipped with physical QLogic Fibre Channel hardware, and successful exploitation leads strictly to a denial of service via a kernel crash without compromising data confidentiality or system integrity. Systems that do not utilize QLogic Fibre Channel Host Bus Adapters are not exposed to this flaw during standard operations. Furthermore, triggering the condition depends on narrow timing windows between command timeout processing and completion handling during asynchronous storage operations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.