kernel: scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read

A flaw was found in the Linux kernel's scsi: qla2xxx driver. A remote attacker, by sending a specially crafted Fibre Channel Protocol FCP response, could cause an integer underflow. This underflow leads to an out-of-bounds read when handling sense data, potentially disclosing sensitive memory...

kernel: scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read

A flaw was found in the Linux kernel's scsi: qla2xxx driver. A remote attacker, by sending a specially crafted Fibre Channel Protocol FCP response, could cause an integer underflow. This underflow leads to an out-of-bounds read when handling sense data, potentially disclosing sensitive memory...

kernel: scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read

A flaw was found in the Linux kernel's scsi: qla2xxx driver. A remote attacker, by sending a specially crafted Fibre Channel Protocol FCP response, could cause an integer underflow. This underflow leads to an out-of-bounds read when handling sense data, potentially disclosing sensitive memory...

CVE-2026-89846

A flaw was found in the Linux kernel's scsi: qla2xxx driver. A remote attacker, by sending a specially crafted Fibre Channel Protocol FCP response, could cause an integer underflow. This underflow leads to an out-of-bounds read when handling sense data, potentially disclosing sensitive memory...

EUVD-2019-10152

Malware in sbrugna...

FC-Only Nimble Array Snapshot Failures in Veeam Backup & Replication P20230718

Challenge When using Veeam Backup & Replication 12 P20230718, rescan, backup, and restore operations may fail when the Nimble array is configured to only use Fibre Channel FC protocol. The request could not be understood by the server. Unexpected argument 'multiinitiator'. Solution A private fix ...

PT-2025-38040

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the qla2xxx SCSI driver where a system crash can occur due to a use-after-free condition. This issue arises because the terminate rport io function ma...

DEBIAN-CVE-2018-7336

In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the FCP protocol dissector could crash. This was addressed in epan/dissectors/packet-fcp.c by checking for a NULL pointer...

CVE-2007-6216

Race condition in the Fibre Channel protocol fcp driver and Devices filesystem devfs in Sun Solaris 10 allows local users to cause a denial of service system hang via some programs that access hardware resources, as demonstrated by the 1 cfgadm and 2 format programs...

CVE-2007-6216

Race condition in the Fibre Channel protocol fcp driver and Devices filesystem devfs in Sun Solaris 10 allows local users to cause a denial of service system hang via some programs that access hardware resources, as demonstrated by the 1 cfgadm and 2 format programs...

CVE-2007-6216

CVE-2007-6216 concerns a race condition in the Fibre Channel protocol (fcp) driver and the Solaris 10 devfs. Connected sources (Tenable Nessus patches 128491-01 for SPARC and 128492-01 for x86) indicate a patch-based remediation: install Solaris patch 128491-01 (SPARC) or 128492-01 (x86) to addre...