CVE-2023-54108 Details
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests The following message and call trace was seen with debug kernels: DMA-API: qla2xxx 0000:41:00.0: device driver failed to check map error [device address=0x00000002a3ff38d8] [size=1024 bytes] [mapped as single] WARNING: CPU: 0 PID: 2930 at kernel/dma/debug.c:1017 check_unmap+0xf42/0x1990 Call Trace: debug_dma_unmap_page+0xc9/0x100 qla_nvme_ls_unmap+0x141/0x210 [qla2xxx] Remove DMA mapping from the driver altogether, as it is already done by FC layer. This prevents the warning.
A vulnerability in the Linux kernel's qla2xxx SCSI driver for Fibre Channel over NVMe has been addressed. The issue arose because the driver improperly managed DMA unmapping for NVMe logical sense requests, leading to a warning in debug kernels. This warning indicated that the driver failed to verify the unmapping of a DMA operation, which could potentially cause issues with memory management and data integrity.
The vulnerability has been fixed in the Linux kernel. Users can apply the latest patches available in the Linux kernel stable tree to address this issue.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Dec 24, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/3a564de3a299856f2cbd289649cea2e20d671a43 | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/3ee4f1991c54c6707aa9df47e51c02ea25bb63e3 | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/77302fb0e357da666d5249a6e91078feeef3dade | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/ad6af23593594402c826eefdf43ae174e5f0f202 | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/c75e6aef5039830cce5d4cf764dd204522f89e6b | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/e596253113b69b4018818260bd5da40c201bee73 | kernel.org | Source CodeVendor |
Weakness Enumeration
No weakness enumeration is available for this CVE.
Affected Products
| Product | Versions |
|---|---|
| Linux kernel | All versions |
CPE
Remediation
| |
| Marvell QLogic qla2xxx | All versions |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Dec 24, 2025 | New CVE Received | kernel.org |
Volerion