CVE-2024-36952

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> scsi: lpfc: Move NPIV&amp;#39;s transport unregistration to after resource clean up<br /> <br /> There are cases after NPIV deletion where the fabric switch still believes<br /> the NPIV is logged into the fabric. This occurs when a vport is<br /> unregistered before the Remove All DA_ID CT and LOGO ELS are sent to the<br /> fabric.<br /> <br /> Currently fc_remove_host(), which calls dev_loss_tmo for all D_IDs including<br /> the fabric D_ID, removes the last ndlp reference and frees the ndlp rport<br /> object. This sometimes causes the race condition where the final DA_ID and<br /> LOGO are skipped from being sent to the fabric switch.<br /> <br /> Fix by moving the fc_remove_host() and scsi_remove_host() calls after DA_ID<br /> and LOGO are sent.