Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
Linux Linux — scsi: qla2xxx: Fix crash when I/O abort times out
AV AC PR UI S C I A CVSS EPSS %ile KEV
L L L N U N N H 5.5 .0022 12.5 —
AFFECTED
Product Versions Fixed
Linux 71c80b75ce8f08c0978ce9a9816b81b5c3ce5e12 – —
Linux 5.5 – 5.10.258
TIMELINE
Oct 4 Reserved by Linux
Oct 4 Published (CNA: Linux)
Aug 4 RESCORED — CVE-2022-50493 (Linux). CVSS 8.8 → 5.5 (NVD).
Description
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Fix crash when I/O abort times out
While performing CPU hotplug, a crash with the following stack was seen:
Call Trace:
qla24xx_process_response_queue+0x42a/0x970 [qla2xxx]
qla2x00_start_nvme_mq+0x3a2/0x4b0 [qla2xxx]
qla_nvme_post_cmd+0x166/0x240 [qla2xxx]
nvme_fc_start_fcp_op.part.0+0x119/0x2e0 [nvme_fc]
blk_mq_dispatch_rq_list+0x17b/0x610
__blk_mq_sched_dispatch_requests+0xb0/0x140
blk_mq_sched_dispatch_requests+0x30/0x60
__blk_mq_run_hw_queue+0x35/0x90
__blk_mq_delay_run_hw_queue+0x161/0x180
blk_execute_rq+0xbe/0x160
__nvme_submit_sync_cmd+0x16f/0x220 [nvme_core]
nvmf_connect_admin_queue+0x11a/0x170 [nvme_fabrics]
nvme_fc_create_association.cold+0x50/0x3dc [nvme_fc]
nvme_fc_connect_ctrl_work+0x19/0x30 [nvme_fc]
process_one_work+0x1e8/0x3c0
On abort timeout, completion was called without checking if the I/O was
already completed.
Verify that I/O and abort request are indeed outstanding before attempting
completion.
Lifecycle
Complete event history — 3 events, chronological
| Date | Event | Detail |
| October 4, 2025 | Reserved | Reserved by Linux |
| October 4, 2025 | Published | Published (CNA: Linux) |
| August 4, 2026 | RESCORED | RESCORED — CVE-2022-50493 (Linux). CVSS 8.8 → 5.5 (NVD). |
Affected
Affected products and packages — 2 rows
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
| Linux | Linux | — | 71c80b75ce8f08c0978ce9a9816b81b5c3ce5e12 | — |
| Linux | Linux | — | 5.5 | 5.10.258 |
About this page
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2022-50493 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.