OESA-2024-1570 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix scsimodesense buffer length handling Several problems exist with scsimodesense buffer length handling: 1 The allocation length field of the MODE...

DEBIAN-CVE-2021-47182

In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix scsimodesense buffer length handling Several problems exist with scsimodesense buffer length handling: 1 The allocation length field of the MODE SENSE10 command is 16-bits, occupying bytes 7 and 8 of the CDB. With...

CVE-2021-47182

The CVE-2021-47182 entry concerns the Linux kernel scsi_mode_sense() implementation. Affected component: scsi core. Issues: improper handling of the MODE SENSE(10) allocation length field (16-bit, truncating lengths >255) and buffer length adjustments that could corrupt memory when len is too ...

PT-2021-27151

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.168 Description A sanity check has been added to the resp mode select function to verify the block descriptor length. The actual impact and attack plausibility of this issue have not yet been proven...

PT-2021-27129

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.222 Description A sanity check for block descriptor length in the resp mode select function is missing. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...