Azure Linux 3.0 Security Update: kernel (CVE-2024-41087)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-41087 advisory. - In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Fix double free on err...

Azure Linux 3.0 Security Update: kernel (CVE-2025-37758)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37758 advisory. - In the Linux kernel, the following vulnerability has been resolved: ata: patapxa: Fix potential NULL pointer...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38336)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38336 advisory. - In the Linux kernel, the following vulnerability has been resolved: ata: patavia: Force PIO for ATAPI device...

PT-2026-27720

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the libata subsystem related to handling deferred quality of service QC commands. Specifically, the code does not cancel pending work after clearing a...

SUSE CVE-2022-50818

In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix runningreq for internal abort commands Disabling the remote phy for a SATA disk causes a hang: root@none$ more /sys/class/sasphy/phy-0:0:8/targetportprotocols sata root@none$ echo 0...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992915)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992915 advisory. In the Linux kernel, the following vulnerability has been resolved: ata: libata-transport: fix error handling in atatportadd In atatportadd, the return value of...

CVE-2022-50818

CVE-2022-50818 concerns the Linux kernel SCSI PM8001 subsystem. The fixed issue is in the per-device running_req accounting for internal abort commands: a race/defect prevented running_req from decrementing after internal abort completion, causing a hang in SAS/SATA paths (notably when disabling ...

USN-7774-1 linux, linux-aws, linux-aws-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-intel-iotg-5.15, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-oracle, linux-raspi, linux-xilinx-zynqmp vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Serial ATA and Parallel ATA...

CLSA-2025-1763734783 kernel: Fix of 64 CVEs

media: bttv: fix use after free error due to btv-timeout timer CVE-2023-52847 - firmware: armscpi: Ensure scpiinfo is not assigned if the probe fails CVE-2022-50087 - wifi: mwifiex: Fix OOB and integer underflow when rx packets CVE-2023-53226 - vsock: Fix transport TOCTOU CVE-2025-38461 - ALSA:...

Malicious code in messi-ata-fuff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0d7e07a3af643c24c2f5988b5f6d99ac442459ecf6f4911ee4eb2db7f6a5fe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-990791)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990791 advisory. In the Linux kernel, the following vulnerability has been resolved: ata: libata-transport: fix error handling in atatdevadd In atatdevadd, the return value of...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-990797)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990797 advisory. In the Linux kernel, the following vulnerability has been resolved: ata: libata-transport: fix error handling in atatlinkadd In atatlinkadd, the return value of...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-990816)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990816 advisory. In the Linux kernel, the following vulnerability has been resolved: ata: libata-transport: fix double atahostput in atatportadd In the error path in atatportadd, whe...

EulerOS 2.0 SP12 : kernel (EulerOS-SA-2025-2330)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : tracing: Add downwritetraceeventsem when adding trace eventCVE-2025-38539 tipc: fix null-ptr-deref when acquiring remote ip of ethernet...

kernel: ata: libata-sff: Ensure that we cannot write outside the allocated buffer

In the Linux kernel, the following vulnerability has been resolved: ata: libata-sff: Ensure that we cannot write outside the allocated buffer reveliofuzzing reported that a SCSIIOCTLSENDCOMMAND ioctl with outlen set to 0xd42, SCSI command set to ATA16 PASS-THROUGH, ATA command set to ATANOP, and...

kernel: ata: libata-sff: Ensure that we cannot write outside the allocated buffer

In the Linux kernel, the following vulnerability has been resolved: ata: libata-sff: Ensure that we cannot write outside the allocated buffer reveliofuzzing reported that a SCSIIOCTLSENDCOMMAND ioctl with outlen set to 0xd42, SCSI command set to ATA16 PASS-THROUGH, ATA command set to ATANOP, and...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990509)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990509 advisory. In the Linux kernel, the following vulnerability has been resolved: ata: satadwc460ex: Fix crash due to OOB write the driver uses libata's tag values from in various...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988867)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988867 advisory. In the Linux kernel, the following vulnerability has been resolved: ata: satadwc460ex: Fix crash due to OOB write the driver uses libata's tag values from in various...

USN-7833-4: Linux kernel (GCP) vulnerabilities

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to...

Siemens SIMATIC Devices Divide By Zero (CVE-2024-27059)

In the Linux kernel, the following vulnerability has been resolved: USB: usb-storage: Prevent divide-by-0 error in isd200atacommand The isd200 sub-driver in usb-storage uses the HEADS and SECTORS values in the ATA ID information to calculate cylinder and head values when creating a CDB for READ o...