Answer in brief
CVE-2024-42288 records a Unknown severity vulnerability in scsi: qla2xxx: Fix for possible memory corruption. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
Answer in brief
CVE-2024-42288 records a Unknown severity vulnerability in scsi: qla2xxx: Fix for possible memory corruption. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=0645cb8350cdb60bfbf91caa722984b81c215add <dae67169cb35a37ecccf60cfcd6bf93a1f4f5efb || >=0645cb8350cdb60bfbf91caa722984b81c215add <87db8d7b7520e99de71791260989f06f9c94953d || >=0645cb8350cdb60bfbf91caa722984b81c215add <b0302ffc74123b6a99d7d1896fcd9b2e4072d9ce || >=0645cb8350cdb60bfbf91caa722984b81c215add <2a15b59a2c5afac89696e44acf5bbfc0599c6c5e || >=0645cb8350cdb60bfbf91caa722984b81c215add <571d7f2a08836698c2fb0d792236424575b9829b || >=0645cb8350cdb60bfbf91caa722984b81c215add <8192c533e89d9fb69b2490398939236b78cda79b || >=0645cb8350cdb60bfbf91caa722984b81c215add <c03d740152f78e86945a75b2ad541bf972fab92a | dae67169cb35a37ecccf60cfcd6bf93a1f4f5efb, 87db8d7b7520e99de71791260989f06f9c94953d, b0302ffc74123b6a99d7d1896fcd9b2e4072d9ce, 2a15b59a2c5afac89696e44acf5bbfc0599c6c5e, 571d7f2a08836698c2fb0d792236424575b9829b, 8192c533e89d9fb69b2490398939236b78cda79b, c03d740152f78e86945a75b2ad541bf972fab92a |
| Linux/Linuxgeneric | 4.20 | Not reported |
Published upstream
Aug 17, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix for possible memory corruption Init Control Block is dereferenced incorrectly. Correctly dereference ICB
Quoted source text, attributed separately from HOL analysis.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=0645cb8350cdb60bfbf91caa722984b81c215add <dae67169cb35a37ecccf60cfcd6bf93a1f4f5efb || >=0645cb8350cdb60bfbf91caa722984b81c215add <87db8d7b7520e99de71791260989f06f9c94953d || >=0645cb8350cdb60bfbf91caa722984b81c215add <b0302ffc74123b6a99d7d1896fcd9b2e4072d9ce || >=0645cb8350cdb60bfbf91caa722984b81c215add <2a15b59a2c5afac89696e44acf5bbfc0599c6c5e || >=0645cb8350cdb60bfbf91caa722984b81c215add <571d7f2a08836698c2fb0d792236424575b9829b || >=0645cb8350cdb60bfbf91caa722984b81c215add <8192c533e89d9fb69b2490398939236b78cda79b || >=0645cb8350cdb60bfbf91caa722984b81c215add <c03d740152f78e86945a75b2ad541bf972fab92a | dae67169cb35a37ecccf60cfcd6bf93a1f4f5efb, 87db8d7b7520e99de71791260989f06f9c94953d, b0302ffc74123b6a99d7d1896fcd9b2e4072d9ce, 2a15b59a2c5afac89696e44acf5bbfc0599c6c5e, 571d7f2a08836698c2fb0d792236424575b9829b, 8192c533e89d9fb69b2490398939236b78cda79b, c03d740152f78e86945a75b2ad541bf972fab92a |
| Linux/Linuxgeneric | 4.20 | Not reported |
Published upstream
Aug 17, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix for possible memory corruption Init Control Block is dereferenced incorrectly. Correctly dereference ICB
Quoted source text, attributed separately from HOL analysis.