SUSE SLED15: qemu / qemu-SLOF / qemu-accel-qtest / qemu-accel-tcg-x86 / qemu-arm / etc (SUSE-SU-2022:3795-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3795-1 advisory. - CVE-2022-0216: Fixed a use after free issue found in hw/scsi/lsi53c895a.c. bsc1198038 -...

PT-2025-53945

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the lpfc create port function within the Linux kernel's SCSI subsystem. The issue was introduced by commit 5e633302ace1, which added support for VMID in mailbox...

UBUNTU-CVE-2022-0216

A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of QEMU. The flaw occurs while processing repeated messages to cancel the current SCSI request via the lsidomsgout function. This flaw allows a malicious privileged user within the guest to crash the QEMU...

CVE-2022-0216: Use After Free

A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of QEMU. The flaw occurs while processing repeated messages to cancel the current SCSI request via the lsidomsgout function. This flaw allows a malicious privileged user within the guest to crash the QEMU...

Denial Of Service (DoS)

qemu is vulnerable to denial of service. The vulnerability exists due to a NULL pointer dereference flaw that was found in the megasas-gen2 SCSI host bus adapter emulation of QEMU...

PT-2024-11468

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the SCSI host release mechanism in the Linux kernel. When a SCSI device is freed, the SCSI host release is triggered, and it is essential to ensure that the...

PT-2024-11336 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.13.0-rc7 Description: A vulnerability in the Linux kernel has been resolved, which involved a bad pointer dereference when the ehandler kthread is invalid. The issue occurred when the error handler thread fail...

PT-2021-29510

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.11 Description The issue concerns error handling of the scsi host alloc function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-25337

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.237 Description: The issue concerns error handling of the scsi host alloc function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2021-29432

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.44 Description The issue concerns error handling of the scsi host alloc function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-29331

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.237 Description The issue is related to error handling of the scsi host alloc function in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...

PT-2021-29314

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.273 Description The issue concerns error handling of the scsi host alloc function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-29349

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.195 Description The issue concerns error handling of the scsi host alloc function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-29372

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.126 Description The issue concerns error handling of the scsi host alloc function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-25516

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.11 Description: The issue concerns error handling of the scsi host alloc function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2021-25438

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.44 Description: The issue concerns error handling of the scsi host alloc function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2021-25378

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.126 Description: The issue is related to error handling of scsi host alloc. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.4.126,...

PT-2021-25355

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.195 Description: The issue is related to error handling in the scsi host alloc function. The actual impact and potential for attack have not been proven yet. Recommendations: For Linux Kernel versions prio...

PT-2021-25320

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.273 Description: The issue is related to error handling in the scsi host alloc function. The actual impact and potential for attack have not been proven yet. Recommendations: For Linux Kernel versions prior...

SUSE: Security Advisory (SUSE-SU-2018:3927-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...