qla2xxx SCSI Buffer Overflow DoS

The vulnerability of the qla2x00probeone function in the drivers/scsi/qla2xxx/qlaos.c file of the Linux SCSI device driver module is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux SCSI Device Service Heap Buffer Overflow DoS

The vulnerability of the ibmvfcinitsubcrqs function in the drivers/scsi/ibmvscsi/ibmvfc.c file of the Linux SCSI device support driver is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a attacker to cause a service failur...

Linux SCSI Driver Heap Buffer Overflow DoS

The vulnerability of the mpi3mrgetalltgtinfo function in the drivers/scsi/mpi3mr/mpi3mrapp.c file of the Linux SCSI device driver module is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

S390 Linux SCSI Device Driver Heap Buffer Overflow DoS

The vulnerability of the zfcpfsfreqsend function in the drivers/s390/scsi/zfcpfsf.c module of the SCSI device driver on the S390 Linux operating system is related to the re-release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the...

Linux SCSI Device Driver Heap Buffer Overflow DoS

The vulnerability of the lpfcissuecmfsyncwqe function in the drivers/scsi/lpfc/lpfcsli.c module of the Linux SCSI device driver involves a memory leak. Exploiting this vulnerability can allow an attacker to cause a system failure...

Linux SCSI Kernel Driver Data Compromise

The vulnerability of the drivers/scsi/mpi3mr/mpi3mrfw.c module of the Linux operating system’s SCSI kernel device driver is related to accessing memory beyond the permissible buffer data size due to computational errors. Exploiting this vulnerability could allow an attacker to compromise the...

Linux SCSI Device Driver Heap Buffer Overflow DoS

The vulnerability of the mvsfree function in the drivers/scsi/mvsas/mvinit.c file of the Linux operating system’s SCSI device driver module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

qla2x00_eh_wait_forPendingCommands Buffer Overflow

The vulnerability of the qla2x00ehwaitforPendingCommands function in the drivers/scsi/qla2xxx/qlaos.c driver for SCSI devices in the Linux operating system is related to a buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

lpfc_dmp_dbg Heap Buffer Overflow DoS

Vulnerability of the lpfcdmpdbg function in the drivers/scsi/lpfc/lpfcinit.c module – The Linux SCSI device support driver is vulnerable to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux SCSI qla2x00_create_host() Buffer Overflow

The vulnerability of the qla2x00createhost function in the drivers/scsi/qla2xxx/qlaos.c driver for Linux SCSI devices is related to the occurrence of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux SCSI Device Driver Heap Buffer Overflow DoS

The vulnerability of the lpfccmplctcmdgftid function in the drivers/scsi/lpfc/lpfcct.c file of the Linux SCSI device driver kernel module is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux SCSI sg_read sg_get_rq_mark DoS

The vulnerabilities of the functions sgread and sggetrqmark in the drivers/scsi/sg.c module of the Linux SCSI device driver are related to premature release of resources during their operation. Exploiting these vulnerabilities could allow an attacker to cause service failures...

Linux SCSI lpfc_wr_object() Heap Buffer Overflow

The vulnerability of the lpfcwrobject function in the drivers/scsi/lpfc/lpfcsli.c file of the Linux SCSI device driver module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

lpfc_abort_handler Heap Buffer Overflow DoS

Vulnerability of the lpfcaborthandler function in the drivers/scsi/lpfc/lpfcscsi.c module – The Linux SCSI device driver has synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux SCSI driver Heap Buffer Overflow DoS

The vulnerability of the mpi3mrsoftresethandler function in the drivers/scsi/mpi3mr/mpi3mrfw.c file of the Linux SCSI device driver module is related to accessing memory beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

Linux SCSI Device Service Buffer Overflow DoS

The vulnerability of the lpfcfcframecheck function in the drivers/scsi/lpfc/lpfcsli.c file of the Linux SCSI device support driver is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux SCSI driver Heap Buffer Overflow DoS

The vulnerability of the qla2x00terminaterportio function in the drivers/scsi/qla2xxx/qlaattr.c file of the Linux SCSI device driver module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...

CVE-2025-71232

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Free sp in error path to fix system crash System crash seen during load/unload test in a loop, 61110.449331 qla2xxx 0000:27:00.0-0042:0: Disabled MSI-X. 61110.467494...

UBUNTU-CVE-2025-71235

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Delay module unload while fabric scan in progress System crash seen during load/unload test in a loop. 105954.384919 RBP: ffff914589838dc0 R08: 0000000000000000 R09: 0000000000000086 105954.384920 R10:...

CVE-2025-71236 scsi: qla2xxx: Validate sp before freeing associated memory

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Validate sp before freeing associated memory System crash with the following signature 154563.214890 nvme nvme2: NVME-FC1: controller connect complete 154564.169363 qla2xxx 0000:b0:00.1-3002:2: nvme: Sched: Set ZIO...