Arbitrary Code Execution

kernel is vulnerable to arbitrary code execution. The vulnerability exists through a use after free caused by a race condition in smptasktimedout and smptaskdone in drivers/scsi/libsas/sasexpander.c which allows an attacker to execute arbitrary codes...

SUSE-SU-2020:2691-1 Security update for ovmf

This update for ovmf fixes the following issues: - CVE-2019-14562: Fixed an overflow in DxeImageVerificationHandler bsc1175476. - Support more SCSI drivers PvScsi, MptScsi and LsiScsi. bsc1119454 - Enable LsiScsi explicitly since it's disabled by default...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : QEMU vulnerabilities (USN-4467-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4467-1 advisory. Ziming Zhang and VictorV discovered that the QEMU SLiRP networking implementation incorrectly handled replying to certain ICMP ec...

Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-4411-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4411-1 advisory. It was discovered that the elf handling code in the Linux kernel did not initialize memory before using it in certain situations. A local attacker could...

USN-4413-1: Linux kernel vulnerabilities

Matthew Sheets discovered that the SELinux network label handling implementation in the Linux kernel could be coerced into de-referencing a NULL pointer. A remote attacker could use this to cause a denial of service system crash. CVE-2020-10711 It was discovered that the SCSI generic sg driver in...

The vulnerability of the _ctl_ioctl_main function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ctlioctlmain function drivers/scsi/mpt3sas/mpt3sasctl.c in the Linux operating system exists due to insufficient checking of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

Privilege Escalation

kernel is vulnerable to privilege escalation. The vulnerability exists as a flaw was found in the aacraid SCSI driver. This allowed a local user to make ioctl calls to the driver which should otherwise be restricted to privileged users...

CVE-2017-18549

A flaw was found in the Linux kernel in the aacsendrawsrb and aacgethbainfo in drivers/scsi/aacraid/commctrl.c in the SCSI, where an uninitialized variable could copy stack-allocated structs to userspace without initializing its member's variables. This flaw can lead to the exposure of kernel sta...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-2599)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1586)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux kernel null pointer dereference vulnerability (CNVD-2020-03125)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A null pointer dereference vulnerability exists in drivers/scsi/libsas/sasdiscover.c in Linux kernel 5.4.6 and earlie...

The vulnerability of the `bfad_im_get_stats()` function (drivers/scsi/bfa/bfad_attr.c) in the Linux kernel allows a hacker to induce a service failure.

The vulnerability of the bfadimgetstats function drivers/scsi/bfa/bfadattr.c in the Linux kernel involves uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability in the driver drivers/scsi/qedi/qedi_dbg.c of the Linux operating system allows a hacker to gain unauthorized access to protected information.

The vulnerability in the driver drivers/scsi/qedi/qedidbg.c of the Linux operating system relates to reading beyond the memory boundaries. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Linux kernel memory leak vulnerability (CNVD-2019-32349)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A memory disclosure vulnerability exists in the drivers/scsi/libsas/sasexpander.c file in Linux kernel versions prior to 5.1.13. An attacker could exploit this...

Design/Logic Flaw

An issue was discovered in drivers/scsi/aacraid/commctrl.c in the Linux kernel before 4.13. There is potential exposure of kernel stack memory because aacgethbainfo does not initialize the hbainfo structure...

Linux kernel buffer overflow vulnerability (CNVD-2019-29723)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A buffer overflow vulnerability exists in the drivers/scsi/qedi/qedidbg.c file in Linux kernel versions prior to 5.1.12. The vulnerability stems from a networked syste...

EulerOS 2.0 SP2 : kernel (EulerOS-SA-2019-1586)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the Linux kernel's NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the same time can make...

Denial Of Service (DoS)

The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. It was found that the Linux kernel's keys subsystem did not correctly garbage collect uninstantiated keyrings. A local attacker could use this flaw to crash the system or, potentially, escalate their privileg...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4316)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4316 advisory. - Copy secureboot flag in boot params across kexec reboot Dave Young Orabug: 22066352 CVE-2015-7837 - ipv6: tcp: add rcu locking in tcpv6sendsynack...

CVE-2017-13168

It was found that SCSI driver in the Linux kernel can improperly access userspace memory outside the provided buffer. A local privileged attacker could potentially use this flaw to expose information from the kernel memory...