PT-2022-28636

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.101 Description The issue is related to the SCSI target iscsi component in the Linux Kernel, where the np under each tpg must be unique. The actual impact and attack plausibility have not yet been proven...

PT-2022-28766

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.10 Description The issue is related to the SCSI target iscsi component in the Linux Kernel, where the np under each tpg must be unique. The actual impact and attack plausibility have not yet been proven...

PT-2022-28561

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.302 Description The issue is related to the SCSI target iscsi component in the Linux Kernel, where the np under each tpg must be unique. The actual impact and attack plausibility have not yet been proven...

PT-2022-28574

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.267 Description The issue is related to the SCSI target iscsi component in the Linux Kernel, where the np under each tpg must be unique. The actual impact and attack plausibility have not yet been proven...

PT-2022-28589

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.230 Description The issue is related to the SCSI target iscsi component in the Linux Kernel, where the np under each tpg must be unique. The actual impact and attack plausibility have not yet been proven...

Important: kernel

Issue Overview: 2023-06-07: CVE-2020-36694 was added to this advisory. An issue was discovered in netfilter in the Linux kernel before 5.10. There can be a use-after-free in the packet processing context, because the per-CPU sequence count is mishandled during concurrent iptables rules replacemen...

PT-2021-25639

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.13 through v5.13.5 Description: A NULL dereference issue was discovered in the SCSI target code, specifically on XCOPY completion. The actual impact and attack plausibility of this issue have not yet been proven...

PT-2021-8252 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a NULL pointer dereference in the Linux kernel's scsi: target: core component. This occurs when the target complete cmd function attempts to access the se tpg w...

RHEL 7 : kernel (RHSA-2021:2732)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2732 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: sizet-to-int conversion...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 7.4 Advanced Update Support, Red Hat Enterprise Linux 7.4 Telco Extended Update Support, and Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impac...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2021-9306)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9306 advisory. - sctp: delay autoasconf init until binding the first addr Xin Long Orabug: 32907967 CVE-2021-23133 CVE-2021-23133 - dm ioctl: fix out of bounds...

PT-2021-29034

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.9 Description The issue is related to the use of smp processor id in preemptible code within the SCSI target core. The actual impact and potential for attack have not been proven yet. Recommendations For...

PT-2021-25040

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.9 Description The issue is related to the use of smp processor id in preemptible code within the SCSI target core. The actual impact and potential for attack have not been proven yet. Recommendations For...

kernel: SCSI target (LIO) write to any block on ILO backstore

A flaw was found in the Linux kernel’s implementation of the Linux SCSI target host, where an authenticated attacker could write to any block on the exported SCSI device backing store. This flaw allows an authenticated attacker to send LIO block requests to the Linux system to overwrite data on t...

RHEL 8 : kernel (RHSA-2021:2185)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2185 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: use after free in eventpoll.c...

Important: Red Hat Security Advisory: kpatch-patch security update

An update is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

RHEL 8 : kpatch-patch (RHSA-2021:2167)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2167 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel...

RHEL 8 : kernel-rt (RHSA-2021:2190)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2190 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

kernel: SCSI target (LIO) write to any block on ILO backstore

A flaw was found in the Linux kernel’s implementation of the Linux SCSI target host, where an authenticated attacker could write to any block on the exported SCSI device backing store. This flaw allows an authenticated attacker to send LIO block requests to the Linux system to overwrite data on t...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...