389 matches found
UBUNTU-CVE-2021-47216
In the Linux kernel, the following vulnerability has been resolved: scsi: advansys: Fix kernel pointer leak Pointers should be printed with %p or %px rather than cast to 'unsigned long' and printed with %lx. Change %lx to %p to print the hashed pointer...
SUSE CVE-2024-26627
In the Linux kernel, the following vulnerability has been resolved: scsi: core: Move scsihostbusy out of host lock for waking up EH handler Inside scsiehwakeup, scsihostbusy is called & checked with host lock every time for deciding if error handler kthread needs to be waken up. This can be too...
DEBIAN-CVE-2024-26627
In the Linux kernel, the following vulnerability has been resolved: scsi: core: Move scsihostbusy out of host lock for waking up EH handler Inside scsiehwakeup, scsihostbusy is called & checked with host lock every time for deciding if error handler kthread needs to be waken up. This can be too...
CVE-2024-26627 scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
In the Linux kernel, the following vulnerability has been resolved: scsi: core: Move scsihostbusy out of host lock for waking up EH handler Inside scsiehwakeup, scsihostbusy is called & checked with host lock every time for deciding if error handler kthread needs to be waken up. This can be too...
UBUNTU-CVE-2023-52500
In the Linux kernel, the following vulnerability has been resolved: scsi: pm80xx: Avoid leaking tags when processing OPCINBSETCONTROLLERCONFIG command Tags allocated for OPCINBSETCONTROLLERCONFIG command need to be freed when we receive the response...
PT-2024-21580
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a potential deadlock in the FCoE Fibre Channel over Ethernet component of the Linux kernel's SCSI subsystem. A commit that changed spin locks from "bh" to "irqsav...
kernel: scsi: mpi3mr: Fix mpi3mr_hba_port memory leak in mpi3mr_remove()
A flaw was found in the mpi3mr module in the Linux kernel. The missing release of memory allocated for mpi3mrhbaport will cause a memory leak, potentially impacting system stability and resulting in a denial of service...
PT-2025-37686
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The storvsc driver in the Linux kernel mishandles virtual Fibre Channel timeouts when integrating with the Fibre Channel transport in the SCSI subsystem. Specifically, the fc eh timed ou...
PT-2025-40158
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the scsi subsystem, specifically within the qla2xxx driver. Analysis using the Klocwork tool identified a potential NULL pointer dereference related t...
PT-2025-40217
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s SCSI subsystem, specifically within the UFS Universal Storage Flash core. The ufshcd queuecommand function may be invoked multiple times for a single...
kernel: scsi: mpt3sas: Fix use-after-free warning
A user after-free vulnerability was found in the Linux kernel in the refcountt variable when performing the controller reset. This issue could lead to denial of service of the system...
PT-2025-49490
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.17-mainline-android14-2-g277223301adb Description The Linux kernel contained a deadlock issue within the UFS Universal Flash Storage subsystem related to the management of command queues MCQ. Specifically, a...
PT-2025-38450
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue where the SCSI subsystem ses could attempt to manage an enclosure with no components. This could lead to an error if the driver tries to manage a...
PT-2025-53179
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer overflow issue exists in the Linux kernel's scsi subsystem, specifically within the lpfc debugfs lockstat write function. A static code analysis identified that copy from user...
PT-2023-33593
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 6.0.16 Description A race condition exists between login work and the login thread in the iscsi target of the scsi subsystem. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...
kernel: scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE
A flaw was found in the lpfc module in the Linux kernel. A missing release of allocated memory when an error occurs will cause a memory leak, potentially impacting system performance and resulting in a denial of service...
kernel: scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE
A flaw was found in the lpfc module in the Linux kernel. A missing release of allocated memory when an error occurs will cause a memory leak, potentially impacting system performance and resulting in a denial of service...
PT-2022-30276
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.10.111 Description The issue concerns the hisi sas component in the Linux Kernel's SCSI subsystem. It involves freeing IRQ vectors in order for v3 hardware. The actual impact and potential for attack have not...
PT-2024-10532
Name of the Vulnerable Software and Affected Versions Linux kernel version 4.18.0-348.el8.x86 64 Description The vulnerability is related to the scsi: qedf component in the Linux kernel. It is caused by the failure to initialize the stag work for vport, resulting in a call trace when creating NPI...
PT-2021-29665
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.13.4 Description The issue is related to a potential use after free error during resets in the iscsi component of the scsi subsystem. The actual impact and attack plausibility have not yet been proven...