14 matches found
EUVD-2022-54505
Malicious code in bioql PyPI...
lpfc_cmpl_els_logo() Function Heap Buffer Overflow DoS
Vulnerability of the lpfccmplelslogo function in the drivers/scsi/lpfc/lpfcels.c module – The Linux SCSI device driver module is vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
CVE-2022-49730
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
DEBIAN-CVE-2022-49730
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted A use-after-free crash can occur after an ELS LOGO is aborted. Specifically, a nodelist structure is freed and then ndlp-vport-cfglogverbose is dereferenced in...
CVE-2022-49730 scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted A use-after-free crash can occur after an ELS LOGO is aborted. Specifically, a nodelist structure is freed and then ndlp-vport-cfglogverbose is dereferenced in...
CVE-2022-49730 scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted A use-after-free crash can occur after an ELS LOGO is aborted. Specifically, a nodelist structure is freed and then ndlp-vport-cfglogverbose is dereferenced in...
CVE-2022-49730
The Linux kernel contains a use-after-free vulnerability in the scsi: lpfc component. Specifically, a NULL pointer dereference can occur after an ELS LOGO is aborted because a nodelist structure is mistakenly freed and then accessed again during a duplicate call to the discovery state machine wit...
CVE-2022-49730
Removed by vendor...
Number withdrawal
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A resource management error vulnerability exists in Linux kernel that stems from the lpfc driver not properly handling node list releases after an ELS LOGO abort...
GSD-2022-1004510 scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted
scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.49 by commit...
PT-2022-32772
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.15.49 Description A potential issue exists where a NULL pointer dereference may occur after an ELS LOGO is aborted. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
PT-2022-32580
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.18.6 Description A potential issue exists where a NULL pointer dereference may occur after an ELS LOGO is aborted. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
PT-2025-8663
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free crash can occur in the Linux kernel after an ELS LOGO is aborted, specifically when the discovery state machine is mistakenly called a second time with the NLP EVT DEVIC...