134 matches found
EUVD-2023-60272
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix buffer overrun Klocwork warning: Buffer Overflow - Array Index Out of Bounds Driver uses fcelsflogi to calculate size of buffer. The actual buffer is nested inside of fcelsflogi which is smaller. Replace...
CVE-2023-54054
CVE-2023-54054 pertains to the Linux kernel SCSI qla2xxx driver, where a buffer overrun occurred in the handling of fc_els_flogi, leading to an incorrect buffer size calculation. Multiple connected sources (OSV entries for Debian, Ubuntu, and general OSV) report that the vulnerability has been re...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989305)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989305 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix a memory leak in an error path of qla2x00processels Commit 8c0eb596baa5 SCSI...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986758)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986758 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix a memory leak in an error path of qla2x00processels Commit 8c0eb596baa5 SCSI...
EUVD-2022-54505
Malicious code in bioql PyPI...
MAL-2025-17110 Malicious code in cli-jbook-2023-els (npm)
The package cli-jbook-2023-els was found to contain malicious code...
Malicious code in cli-jbook-2023-els (npm)
The package cli-jbook-2023-els was found to contain malicious code...
PT-2025-55229
ELS-1267: merge spec for centos7, rhel7 and oracle7...
RHSA-2025:3848 Red Hat Security Advisory: java-11-openjdk ELS security update
Bulletin has no description...
CLSA-2025-1743193221 Update of kernel
Backported els3..els12 patches and changelog...
lpfc_cmpl_els_logo() Function Heap Buffer Overflow DoS
Vulnerability of the lpfccmplelslogo function in the drivers/scsi/lpfc/lpfcels.c module – The Linux SCSI device driver module is vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
qla2x00_process_els Heap Buffer Overflow DoS
Vulnerability of the qla2x00processels function in the drivers/scsi/qla2xxx/qlabsg.c module – The Linux system’s SCSI device support driver is vulnerable to a memory leak before the last reference is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
DEBIAN-CVE-2022-49730
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted A use-after-free crash can occur after an ELS LOGO is aborted. Specifically, a nodelist structure is freed and then ndlp-vport-cfglogverbose is dereferenced in...
CVE-2022-49730
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2022-49730
Removed by vendor...
CVE-2022-49730 scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted A use-after-free crash can occur after an ELS LOGO is aborted. Specifically, a nodelist structure is freed and then ndlp-vport-cfglogverbose is dereferenced in...
CVE-2022-49730 scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted A use-after-free crash can occur after an ELS LOGO is aborted. Specifically, a nodelist structure is freed and then ndlp-vport-cfglogverbose is dereferenced in...
CVE-2022-49730
The Linux kernel contains a use-after-free vulnerability in the scsi: lpfc component. Specifically, a NULL pointer dereference can occur after an ELS LOGO is aborted because a nodelist structure is mistakenly freed and then accessed again during a duplicate call to the discovery state machine wit...