91 matches found
SUSE CVE-2023-54054
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
EUVD-2023-60272
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix buffer overrun Klocwork warning: Buffer Overflow - Array Index Out of Bounds Driver uses fcelsflogi to calculate size of buffer. The actual buffer is nested inside of fcelsflogi which is smaller. Replace...
CVE-2023-54054
CVE-2023-54054 pertains to the Linux kernel SCSI qla2xxx driver, where a buffer overrun occurred in the handling of fc_els_flogi, leading to an incorrect buffer size calculation. Multiple connected sources (OSV entries for Debian, Ubuntu, and general OSV) report that the vulnerability has been re...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989305)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989305 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix a memory leak in an error path of qla2x00processels Commit 8c0eb596baa5 SCSI...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986758)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986758 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix a memory leak in an error path of qla2x00processels Commit 8c0eb596baa5 SCSI...
EUVD-2022-54505
Malicious code in bioql PyPI...
MAL-2025-17110 Malicious code in cli-jbook-2023-els (npm)
The package cli-jbook-2023-els was found to contain malicious code...
Malicious code in cli-jbook-2023-els (npm)
The package cli-jbook-2023-els was found to contain malicious code...
RHSA-2025:3848 Red Hat Security Advisory: java-11-openjdk ELS security update
Bulletin has no description...
CLSA-2025-1743193221 Update of kernel
Backported els3..els12 patches and changelog...
Vulnerability of the lpfc_cmpl_els_logo() function in the drivers/scsi/lpfc/lpfc_els.c module – The SCSI device support driver for the Linux operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
Vulnerability of the lpfccmplelslogo function in the drivers/scsi/lpfc/lpfcels.c module – The Linux SCSI device driver module is vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
Vulnerability of the qla2x00_process_els() function in the drivers/scsi/qla2xxx/qla_bsg.c module – This driver provides support for SCSI devices in the Linux operating system. It can be exploited by attackers to cause service failures.
Vulnerability of the qla2x00processels function in the drivers/scsi/qla2xxx/qlabsg.c module – The Linux system’s SCSI device support driver is vulnerable to a memory leak before the last reference is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
DEBIAN-CVE-2022-49730
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted A use-after-free crash can occur after an ELS LOGO is aborted. Specifically, a nodelist structure is freed and then ndlp-vport-cfglogverbose is dereferenced in...
CVE-2022-49730
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2022-49730 scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted A use-after-free crash can occur after an ELS LOGO is aborted. Specifically, a nodelist structure is freed and then ndlp-vport-cfglogverbose is dereferenced in...
CVE-2022-49730
CVE-2022-49730 entry is rejected by the CVE Numbering Authority and does not represent an active vulnerability.
CVE-2022-49730
Removed by vendor...
CVE-2022-49730 scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted A use-after-free crash can occur after an ELS LOGO is aborted. Specifically, a nodelist structure is freed and then ndlp-vport-cfglogverbose is dereferenced in...