Not yet scoredPublished Dec 24, 2025

CVE-2023-54108scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests

Updated under an hour ago (Oct 28, 2026, 3:30 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests The following message and call trace was seen with debug kernels: DMA-API: qla2xxx 0000:41:00.0: device driver failed to check map error [device address=0x00000002a3ff38d8] [size=1024 bytes] [mapped as single] WARNING: CPU: 0 PID: 2930 at kernel/dma/debug.c:1017 check_unmap+0xf42/0x1990 Call Trace: debug_dma_unmap_page+0xc9/0x100 qla_nvme_ls_unmap+0x141/0x210 [qla2xxx] Remove DMA mapping from the driver altogether, as it is already done by FC layer. This prevents the warning.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 23, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 2d087c7e55db420107c3ea97b228e067a7b488a1 before 3a564de3a299856f2cbd289649cea2e20d671a43; from 0910a791a6d7fd331f231f48200e18babb519769 before e596253113b69b4018818260bd5da40c201bee73; from c9d6081a5f18286ad62afc1e9e06a90cfd626902 before 77302fb0e357da666d5249a6e91078feeef3dade; from c85ab7d9e27a80e48d5b7d7fb2fe2b0fdb2de523 before 3ee4f1991c54c6707aa9df47e51c02ea25bb63e3; from c85ab7d9e27a80e48d5b7d7fb2fe2b0fdb2de523 before ad6af23593594402c826eefdf43ae174e5f0f202; from c85ab7d9e27a80e48d5b7d7fb2fe2b0fdb2de523 before c75e6aef5039830cce5d4cf764dd204522f89e6b; 9765319079131d6a6019caec661825808c6405f1; c05f4f6485726faae08073f947368ee10439d3f0; and 5 more ranges	CNA record

References

References

https://git.kernel.org/stable/c/3a564de3a299856f2cbd289649cea2e20d671a43
https://git.kernel.org/stable/c/e596253113b69b4018818260bd5da40c201bee73
https://git.kernel.org/stable/c/77302fb0e357da666d5249a6e91078feeef3dade
https://git.kernel.org/stable/c/3ee4f1991c54c6707aa9df47e51c02ea25bb63e3
https://git.kernel.org/stable/c/ad6af23593594402c826eefdf43ae174e5f0f202
https://git.kernel.org/stable/c/c75e6aef5039830cce5d4cf764dd204522f89e6b

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.