634 matches found
CVE-2025-39998 scsi: target: target_core_configfs: Add length check to avoid buffer overflow
In the Linux kernel, the following vulnerability has been resolved: scsi: target: targetcoreconfigfs: Add length check to avoid buffer overflow A buffer overflow arises from the usage of snprintf to write into the buffer "buf" in targetlugpmembersshow function located in...
CVE-2025-39998
CVE-2025-39998 – Linux kernel scsi: target_core_configfs buffer overflow fix. The issue arises in target_lu_gp_members_show in drivers/target/target_core_configfs.c where a snprintf writes into a 256-byte buffer (LU_GROUP_NAME_BUF) and the total length can exceed this, leading to a potential over...
Linux Distros Unpatched Vulnerability : CVE-2023-53576
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nullblk: Always check queue mode setting from configfs Make sure to check device queue mode in the nullvalidateconf and return error for NULLQRQ as we don't all...
EUVD-2025-32771
In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix buffer overflow in liotargetnaclinfoshow The function liotargetnaclinfoshow uses sprintf in a loop to print details for every iSCSI connection in a session without checking for the buffer length. With...
EUVD-2020-7763
Malware in sbrugna...
CVE-2023-53676: Out-of-bounds Write
In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix buffer overflow in liotargetnaclinfoshow The function liotargetnaclinfoshow uses sprintf in a loop to print details for every iSCSI connection in a session without checking for the buffer length. With...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986531)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986531 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: configfs: Prevent OOB read/write in usbstringcopy Userspace provided string 's' coul...
PT-2025-41120
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The lio target nacl info show function within the iSCSI target component does not properly validate buffer lengths when using sprintf in a loop to display details for each iSCSI...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987277)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987277 advisory. In the Linux kernel, the following vulnerability has been resolved: configfs: fix a race in configfs,unregistersubsystem When configfsregistersubsystem or...
SUSE CVE-2023-53576
In the Linux kernel, the following vulnerability has been resolved: nullblk: Always check queue mode setting from configfs Make sure to check device queue mode in the nullvalidateconf and return error for NULLQRQ as we don't allow legacy I/O path, without this patch we get OOPs when queue mode is...
CVE-2023-53576
In the Linux kernel, the following vulnerability has been resolved: nullblk: Always check queue mode setting from configfs Make sure to check device queue mode in the nullvalidateconf and return error for NULLQRQ as we don't allow legacy I/O path, without this patch we get OOPs when queue mode is...
UBUNTU-CVE-2023-53576
In the Linux kernel, the following vulnerability has been resolved: nullblk: Always check queue mode setting from configfs Make sure to check device queue mode in the nullvalidateconf and return error for NULLQRQ as we don't allow legacy I/O path, without this patch we get OOPs when queue mode is...
CVE-2023-53576 null_blk: Always check queue mode setting from configfs
In the Linux kernel, the following vulnerability has been resolved: nullblk: Always check queue mode setting from configfs Make sure to check device queue mode in the nullvalidateconf and return error for NULLQRQ as we don't allow legacy I/O path, without this patch we get OOPs when queue mode is...
CVE-2023-53576
CVE-2023-53576 affects the Linux kernel’s null_blk driver. The patch ensures queue mode is always validated from configfs by checking queue_mode in null_validate_conf() and returning an error for NULL_Q_RQ to prevent a NULL I/O path OOPs when queue_mode is set to 1. Reproduction steps are provide...
CVE-2023-53576 null_blk: Always check queue mode setting from configfs
In the Linux kernel, the following vulnerability has been resolved: nullblk: Always check queue mode setting from configfs Make sure to check device queue mode in the nullvalidateconf and return error for NULLQRQ as we don't allow legacy I/O path, without this patch we get OOPs when queue mode is...
PT-2025-40718
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.3.0-rc5lblk+ 5 Description The Linux kernel contained a flaw in the null block null blk driver related to the handling of queue mode settings through configfs. Specifically, the code did not adequately validate...
CVE-2023-53576: NULL Pointer Dereference
In the Linux kernel, the following vulnerability has been resolved: nullblk: Always check queue mode setting from configfs Make sure to check device queue mode in the nullvalidateconf and return error for NULLQRQ as we don't allow legacy I/O path, without this patch we get OOPs when queue mode is...
EUVD-2025-26106
Malicious code in bioql PyPI...