The vulnerability of the qla24xx_build_scsi_type_6_iocbs() function in the drivers/scsi/qla2xxx/qla_iocb.c module of the Linux operating system’s SCSI device driver allows a hacker to cause a service failure.

The vulnerability of the qla24xxbuildscsitype6iocbs function in the drivers/scsi/qla2xxx/qlaiocb.c driver for SCSI devices in the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the lpfc_prep_embed_io() function in the drivers/scsi/lpfc/lpfc_sli.c module of the Linux operating system’s SCSI device support driver allows a hacker to cause a service failure.

The vulnerability of the lpfcprepembedio function in the drivers/scsi/lpfc/lpfcsli.c file of the Linux SCSI device support driver module is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the qla24xx_issue_sa_replace_iocb() function in the drivers/scsi/qla2xxx/qla_edif.c module of the SCSI device driver for the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the qla24xxissuesareplaceiocb function in the drivers/scsi/qla2xxx/qlaedif.c module of the SCSI device driver for the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Oracle Linux 9 : kernel (ELSA-2026-6153)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-6153 advisory. - net/sched: clsu32: use skbheaderpointercareful Paolo Abeni RHEL-150403 CVE-2026-23204 - bonding: fix use-after-free due to enslave fail after slave...

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count()

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix use-after-free in iscsitdecsessionusagecount In iscsitdecsessionusagecount, the function calls complete while holding the sess-sessionusagelock. Similar to the connection usage count logic, the waiter...

RHEL 9 : kernel (RHSA-2026:6153)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:6153 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel: Use-After-Free...

Important: kernel6.12

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: md: suspend array while updating raiddisks via sysfs CVE-2025-71225 In the Linux kernel, the following vulnerability has been resolved: btrfs: fix reservation leak in some error paths when inserting inline extent...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: pagepool: Fix use-after-free in pagepoolrecycleinring CVE-2025-38129 In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix a null-ptr access in the cursor snooper CVE-2025-40110 In th...

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2022-50453: gpiolib: cdev: fix NULL-pointer dereferences bsc1250887. CVE-2023-53794: cifs: fix session state check in reconnect to avoid use-after-free issue...

scsi: core: Fix refcount leak for tagset_refcnt

...

SUSE SLES15 / openSUSE 15 : Security update for the Linux Kernel (SUSE-SU-2026:1041-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1041-1 advisory. The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bugs...

The vulnerability of the ibmvfc_init_sub_crqs() function in the drivers/scsi/ibmvscsi/ibmvfc.c module of the Linux operating system’s SCSI device support driver allows a attacker to cause a service failure.

The vulnerability of the ibmvfcinitsubcrqs function in the drivers/scsi/ibmvscsi/ibmvfc.c file of the Linux SCSI device support driver is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a attacker to cause a service failur...

The vulnerability of the qla2x00_probe_one() function in the drivers/scsi/qla2xxx/qla_os.c driver module for SCSI devices in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the qla2x00probeone function in the drivers/scsi/qla2xxx/qlaos.c file of the Linux SCSI device driver module is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerabilities of the functions qla4xxx_set_chap_entry() and qla4xxx_iface_set_param() in the driver module drivers/scsi/qla4xxx/ql4_os.c of the Linux SCSI device driver module allow a hacker to cause a service failure.

The vulnerabilities of the functions qla4xxxsetchapentry and qla4xxxifacesetparam in the driver module drivers/scsi/qla4xxx/ql4os.c of the Linux SCSI device driver involve reading memory beyond the allocated buffer. Exploiting these vulnerabilities could allow an attacker to cause a service failu...

CVE-2026-23292

A flaw was found in the Linux kernel's scsi: target subsystem. A local user could trigger a recursive locking condition when the targetcoreitemdbrootstore function attempts to open a configfs file for which it already holds a semaphore. This could lead to a system hang, resulting in a Denial of...

CVE-2026-23296

A flaw was found in the Linux kernel's SCSI core. A reference count leak, a type of resource management issue, occurs when tearing down a SCSI host due to an error in the tagsetrefcnt mechanism. This can cause the system to hang, leading to a Denial of Service DoS for the affected system...

SUSE CVE-2026-23296

In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix refcount leak for tagsetrefcnt This leak will cause a hang when tearing down the SCSI host. For example, iscsid hangs with the following call trace: 130120.652718 scsiallocsdev: Allocation failure during SCSI...

SUSE CVE-2026-23306

In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix use-after-free in pm8001queuecommand Commit e29c47fe8946 "scsi: pm8001: Simplify pm8001taskexec" refactors pm8001queuecommand, however it introduces a potential cause of a double free scenario when it changes th...

SUSE CVE-2026-23355

In the Linux kernel, the following vulnerability has been resolved: ata: libata: cancel pending work after clearing deferredqc Syzbot reported a WARNON in atascsideferredqcwork, caused by ap-ops-qcdefer returning non-zero before issuing the deferred qc. atascsischeduledeferredqc is called during...