CVE-2023-53322

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> scsi: qla2xxx: Wait for io return on terminate rport<br /> <br /> System crash due to use after free.<br /> Current code allows terminate_rport_io to exit before making<br /> sure all IOs has returned. For FCP-2 device, IO&amp;#39;s can hang<br /> on in HW because driver has not tear down the session in FW at<br /> first sign of cable pull. When dev_loss_tmo timer pops,<br /> terminate_rport_io is called and upper layer is about to<br /> free various resources. Terminate_rport_io trigger qla to do<br /> the final cleanup, but the cleanup might not be fast enough where it<br /> leave qla still holding on to the same resource.<br /> <br /> Wait for IO&amp;#39;s to return to upper layer before resources are freed.