PT-2021-25853

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.198 Description The issue is related to a potential use after free error during resets in the iscsi component of the scsi subsystem. The actual impact and attack plausibility have not yet been proven...

PT-2021-29614

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.13.5 Description The issue is related to an array index out of bound exception in the libfc component of the scsi subsystem. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2021-29828

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.199 Description The issue is related to an array index out of bound exception in the libfc component of the scsi subsystem. The actual impact and attack plausibility have not yet been proven. Recommendation...

PT-2021-25881

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.241 Description The issue is related to an array index out of bound exception in the libfc component of the scsi subsystem. The actual impact and attack plausibility have not yet been proven. Recommendation...

PT-2021-25746

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.52 Description The issue is related to a potential use after free error during resets in the iscsi component of the scsi subsystem. The actual impact and attack plausibility have not yet been proven...

PT-2021-29800

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.134 Description The issue is related to a potential use after free error during resets in the iscsi component of the scsi subsystem. The actual impact and attack plausibility have not yet been proven...

PT-2021-25670

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.13.4 Description: The issue is related to a potential use after free error during resets in the iscsi component of the scsi subsystem. The actual impact and attack plausibility have not yet been proven...

PT-2021-29741

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.10.52 Description The issue is related to a potential use after free error during resets in the iscsi component of the scsi subsystem. The actual impact and attack plausibility have not yet been proven...

PT-2021-25805

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.134 Description The issue is related to a potential use after free error during resets in the iscsi component of the scsi subsystem. The actual impact and attack plausibility have not yet been proven...

PT-2021-29848

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.198 Description The issue is related to a potential use after free error during resets in the iscsi component of the scsi subsystem. The actual impact and attack plausibility have not yet been proven...

kernel: heap buffer overflow in the iSCSI subsystem

A flaw was found in the Linux kernel. A heap buffer overflow in the iSCSI subsystem is triggered by setting an iSCSI string attribute to a value larger than one page and then trying to read it. The highest threat from this vulnerability is to data confidentiality and integrity as well as system...

AZL-6532 CVE-2021-27363 affecting package kernel for versions less than 5.10.78.1-1

An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to determine the address of the iscsitransport structure. When an iSCSI transport is registered with the iSCSI subsystem, the transport's handle is available to unprivileged users via the sysfs file...

Denial Of Service (DoS)

xen is vulnerable to denial of service DoS. The vulnerability exists as a buffer overflow flaw was found in the Xen hypervisor SCSI subsystem emulation. An unprivileged, local guest user could provide a large number of bytes that are used to zero out a fixed-sized buffer via a SAI READ CAPACITY...

Updated kernel packages fix security vulnerabilities

This kernel update is based on the upstream 4.14.25 and updates the KPTI mitigation for Meltdown CVE-2017-5754 on 32bit x86. It also adds ome optimizations and improvements to mitigate some of the slowdons caused by the Meltdown CVE-2017-5754 and Spectre, variant 2 CVE-2017-5715. Other security...

USN-3582-2: Linux kernel (Xenial HWE) vulnerabilities | Cloud Foundry

Severity High Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Description USN-3582-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 16.04 LTS for Ubuntu 14.04...

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-3583-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3583-1 advisory. It was discovered that an out-of-bounds write vulnerability existed in the Flash-Friendly File System f2fs in the Linux kernel. An attacker could constru...

Ubuntu: Security Advisory (USN-3583-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS : Linux kernel (Xenial HWE) vulnerabilities (USN-3582-2)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3582-2 advisory. USN-3582-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enableme...

Ubuntu 17.10 : linux, linux-raspi2 vulnerabilities (USN-3487-1)

It was discovered that the KVM subsystem in the Linux kernel did not properly keep track of nested levels in guest page tables. A local attacker in a guest VM could use this to cause a denial of service host OS crash or possibly execute arbitrary code in the host OS. CVE-2017-12188 It was...

USN-3422-1: Linux kernel vulnerabilities

It was discovered that a buffer overflow existed in the Bluetooth stack of the Linux kernel when handling L2CAP configuration responses. A physically proximate attacker could use this to cause a denial of service system crash. CVE-2017-1000251 It was discovered that the asynchronous I/O aio...