Vulnerability of the lpfc_issue_els_plogi() function in the drivers/scsi/lpfc/lpfc_els.c module – This driver provides support for SCSI devices in the Linux operating system. It allows a hacker to cause a service failure.

Vulnerability of the lpfcissueelsplogi function in the drivers/scsi/lpfc/lpfcels.c module – The Linux SCSI device support driver is vulnerable due to a reliance on the NULL pointer pointer. Exploitation of this vulnerability could allow an attacker to cause a service failure...

Vulnerability of the iscsi_prep_bidi_ahs() function in the drivers/scsi/libiscsi.c module – This driver supports SCSI devices in Linux operating systems. It can be exploited by attackers to cause service interruptions.

Vulnerability of the iscsiprepbidiahs function in the drivers/scsi/libiscsi.c module – The Linux system’s SCSI device driver framework involves the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Vulnerability of the fc_rport_prli_resp() function in the drivers/scsi/libfc/fc_rport.c module – This driver is part of the Linux operating system’s SCSI device support framework. It allows attackers to compromise the confidentiality and accessibility of protected information.

Vulnerability of the fcrportprliresp function in the drivers/scsi/libfc/fcrport.c module – The Linux system’s SCSI device support driver involves reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of...

DEBIAN-CVE-2022-50098

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts Ensure SRB is returned during I/O timeout error escalation. If that is not possible fail the escalation path. Following crash stack was seen: BUG: unable to...

CVE-2022-50031

Removed by vendor...

Astra Linux – Vulnerability in Linux 6.1

A race condition was detected in the Linux kernel’s scsi device driver, specifically in the lpfcunregisterfcfrescan function. This can lead to a null pointer dereferencing issue, potentially causing a kernel panic or a denial-of-service attack...

The vulnerability of the qla2x00_do_dpc() function in the drivers/scsi/qla2xxx/qla_os.c module of the Linux system’s SCSI device support driver allows a hacker to gain increased privileges.

The vulnerability of the qla2x00dodpc function in the drivers/scsi/qla2xxx/qlaos.c module of the Linux SCSI device support driver relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the lpfc_get_sfp_info_wait() function in the Linux kernel’s SCSI device support driver allows a attacker to cause a service failure.

The vulnerability of the lpfcgetsfpinfowait function in the Linux kernel’s SCSI device support driver relates to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

SUSE CVE-2025-37981

In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Use iskdumpkernel to check for kdump The smartpqi driver checks the resetdevices variable to determine whether special adjustments need to be made for kdump. This has the effect that after a regular kexec reboot,...

UBUNTU-CVE-2025-37828

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: mcq: Add NULL check in ufshcdmcqabort A race can occur between the MCQ completion path and the abort handler: once a request completes, blkmqfreerequest sets rq-mqhctx to NULL, meaning the subsequent ufshcdmcqreqtohwq...

CBL Mariner 2.0 Security Update: kernel (CVE-2025-21957)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21957 advisory. - In the Linux kernel, the following vulnerability has been resolved: scsi: qla1280: Fix kernel oops when debu...

CVE-2023-53120

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix config page DMA memory leak A fix for: DMA-API: pci 0000:83:00.0: device driver has pending DMA allocations while released from device count=1...

CVE-2023-53128

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix throttlegroups memory leak Add a missing kfree...

DEBIAN-CVE-2023-53037

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Bad drive in topology results kernel crash When the SAS Transport Layer support is enabled and a device exposed to the OS by the driver fails INQUIRY commands, the driver frees up the memory allocated for an interna...

UBUNTU-CVE-2023-53056

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Synchronize the IOCB count to be in order A system hang was observed with the following call trace: BUG: kernel NULL pointer dereference, address: 0000000000000000 PGD 0 P4D 0 Oops: 0000 1 PREEMPT SMP NOPTI CPU: 15...

UBUNTU-CVE-2023-53126

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix sashba.phy memory leak in mpi3mrremove Free mrioc-sashba.phy at .remove...

CVE-2023-53120 scsi: mpi3mr: Fix config page DMA memory leak

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix config page DMA memory leak A fix for: DMA-API: pci 0000:83:00.0: device driver has pending DMA allocations while released from device count=1...

CVE-2023-53037 scsi: mpi3mr: Bad drive in topology results kernel crash

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Bad drive in topology results kernel crash When the SAS Transport Layer support is enabled and a device exposed to the OS by the driver fails INQUIRY commands, the driver frees up the memory allocated for an interna...

PT-2025-18891 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns a resource leak in the Linux kernel's MPI3MR SCSI driver, specifically in the mpi3mr remove function. A missing resource clean up has been identified and addressed...

The vulnerability of the sg_release() function in the drivers/scsi/sg.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sgrelease function in the drivers/scsi/sg.c module of the Linux kernel is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...