GSD-2022-1002814 scsi: target: tcmu: Fix possible data corruption

scsi: target: tcmu: Fix possible data corruption This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

PT-2022-31096

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue is related to the scsi target tcmu in the Linux Kernel, where the XArray lock is held when calling lock page. The actual impact and attack plausibility have not yet been proven...

PT-2022-31359

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue is related to possible data corruption in the scsi: target: tcmu component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-31705

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue is related to the scsi target tcmu in the Linux Kernel, where the XArray lock is held when calling lock page. The actual impact and attack plausibility have not yet been proven...

PT-2022-31413

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue is related to the scsi target tcmu in the Linux Kernel, where the XArray lock is held when calling lock page. The actual impact and attack plausibility have not yet been proven...

PT-2022-31077

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue is related to possible data corruption in the scsi: target: tcmu component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-31645

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue is related to possible data corruption in the scsi: target: tcmu component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

kernel: scsi: target: core: Avoid smp_processor_id() in preemptible code

This linux kernel vulnerability occurs in the SCSI target core subsystem, specifically concerning how CPU IDs are handled for TCMU Target Core Module in Userspace devices. The issue arises because the kernel previously used the smpprocessorid function within preemptible code during abort handling...

NewStart CGSL CORE 5.05 / MAIN 5.05 : kernel Multiple Vulnerabilities (NS-SA-2022-0040)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has kernel packages installed that are affected by multiple vulnerabilities: - An issue was discovered in the Linux kernel before 4.14.11. A double free may be caused by the function allocatetracebuffer in the file...

GSD-2022-1002162 scsi: target: tcmu: Fix possible page UAF

scsi: target: tcmu: Fix possible page UAF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.190 by commit...

GSD-2022-1000971 scsi: target: tcmu: Fix possible page UAF

scsi: target: tcmu: Fix possible page UAF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.4 by commit...

PT-2022-29926

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.35 Description The issue is related to a possible page use-after-free UAF in the scsi: target: tcmu component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-30658

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description The issue is related to a possible page use-after-free UAF in the scsi: target: tcmu component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-29244

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.4 Description The issue is related to a possible page use-after-free UAF in the tcmu component of the SCSI target subsystem. The actual impact and attack plausibility have not yet been proven. Recommendatio...

PT-2022-30564

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.239 Description The issue is related to a possible page use-after-free UAF in the tcmu component of the SCSI target subsystem. The actual impact and attack plausibility have not yet been proven...

PT-2022-30435

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.190 Description The issue is related to a possible page use-after-free UAF in the tcmu component of the SCSI target subsystem. The actual impact and attack plausibility have not yet been proven...

PT-2022-30228

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.112 Description The issue is related to a possible page use-after-free UAF in the tcmu component of the SCSI target subsystem. The actual impact and attack plausibility have not yet been proven...

GSD-2022-1000417 scsi: target: iscsi: Make sure the np under each tpg is unique

scsi: target: iscsi: Make sure the np under each tpg is unique This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.24 by commit...

PT-2022-28691

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.24 Description The issue is related to the scsi target iscsi component, where the np under each tpg must be unique. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-28607

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.180 Description The issue is related to the SCSI target iscsi component in the Linux Kernel, where the np under each tpg must be unique. The actual impact and attack plausibility have not yet been proven...