An issue was discovered in the Linux kernel through 5.6.11. sg_write lacks an sg_remove_request call in a certain failure case aka CID-83c6f2390040.

🗓️ 10 Nov 2020 08:00:00Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com👁 12 Views

Linux kernel up to 5.6.11: sg_write omits sg_remove_request in a failure case (CID-83c6f2390040).

Reporter	Title	Published	Views	Family All 384
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel and Java affect IBM Spectrum Protect Plus	3 Mar 202121:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Security is affected by multiple vulnerabilities in kernel.	7 Jul 202211:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System switch firmware products are affected by vulnerabilities in the Kernel	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM RackSwitch firmware products are affected by vulnerabilities in the Kernel	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	2 Feb 202105:06	–	ibm
Tenable Nessus	Amazon Linux 2 : kernel (ALAS-2020-1431)	4 Jun 202000:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-012)	2 May 202200:00	–	nessus
Tenable Nessus	Amazon Linux AMI : kernel (ALAS-2020-1377)	4 Jun 202000:00	–	nessus
Tenable Nessus	AlmaLinux 8 : kernel (ALSA-2020:4431)	9 Feb 202200:00	–	nessus
Tenable Nessus	CentOS 8 : kernel (CESA-2020:4431)	1 Feb 202100:00	–	nessus

Vulners

Node

microsoft cm1_kernel_5.4.91-11Range<5.4.91-11

10 Nov 2020 08:00Current

8.4High risk

Vulners AI Score8.4

CVSS 24.6

CVSS 3.16.7

EPSS0.0062

linux kernel scsi generic write remove request missing failure case cid 83c6f2390040