PT-2026-28637

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description A flaw allows a local attacker within a guest virtual machine to write data beyond its allocated memory. This occurs when the cpu physical memory map function returns a shorter length than...

PT-2026-6129

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the scsi subsystem, specifically in the qla2xxx driver. The qla27xx copy fpin pkt and qla27xx copy multiple pkt functions use the frame size...

PT-2026-20428

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s SCSI target iSCSI implementation within the iscsit dec conn usage count function. The function calls complete while holding the conn-conn usage lock...

PT-2026-27720

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the libata subsystem related to handling deferred quality of service QC commands. Specifically, the code does not cancel pending work after clearing a...

CVE-2022-50840

In the Linux kernel, the following vulnerability has been resolved: scsi: snic: Fix possible UAF in snictgtcreate Smatch reports a warning as follows: drivers/scsi/snic/snicdisc.c:307 snictgtcreate warn: '&tgt-;list' not removed from list If deviceadd fails in snictgtcreate, tgt will be freed, bu...

SUSE CVE-2022-50818

In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix runningreq for internal abort commands Disabling the remote phy for a SATA disk causes a hang: root@none$ more /sys/class/sasphy/phy-0:0:8/targetportprotocols sata root@none$ echo 0...

SUSE CVE-2022-50840

In the Linux kernel, the following vulnerability has been resolved: scsi: snic: Fix possible UAF in snictgtcreate Smatch reports a warning as follows: drivers/scsi/snic/snicdisc.c:307 snictgtcreate warn: '&tgt-list' not removed from list If deviceadd fails in snictgtcreate, tgt will be freed, but...

SUSE CVE-2023-54179

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Array index may go out of bound Klocwork reports array 'vha-hoststr' of size 16 may use index values 16..19. Use snprintf instead of sprintf...

SUSE CVE-2023-54234

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix missing mrioc-evtackcmds initialization Commit c1af985d27da "scsi: mpi3mr: Add Event acknowledgment logic" introduced an array mrioc-evtackcmds but initialization of the array elements was missed. They are just...

SUSE CVE-2023-54289

In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Fix NULL dereference in error handling Smatch reported: drivers/scsi/qedf/qedfmain.c:3056 qedfallocglobalqueues warn: missing unwind goto? At this point in the function, nothing has been allocated so we can return...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992716)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992716 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input Malformed user...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992882)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992882 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Fix a use-after-free Change the LIO port members inside struct srptport from regular...

Linux Distros Unpatched Vulnerability : CVE-2023-54234

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: mpi3mr: Fix missing mrioc-evtackcmds initialization Commit c1af985d27da scsi: mpi3mr: Add Event acknowledgment logic introduced an array mrioc-evtackcmds...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992991)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992991 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: core: Remove the /proc/scsi/$procname directory earlier Remove the /proc/scsi/$procname...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992999)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992999 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix a procfs host directory removal regression scsiprochostdirrm decreases a referenc...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993044)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993044 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcmloop: Fix possible name leak in tcmloopsetuphbabus If deviceregister fails in...

Linux Distros Unpatched Vulnerability : CVE-2022-50850

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: ipr: Fix WARNING in iprinit iprinit will not call unregisterrebootnotifier when pciregisterdriver fails, which causes a WARNING. Call...

Unity Linux 20.1060a Security Update: kernel (UTSA-2025-992874)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992874 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix command flush on cable pull System crash due to command failed to flush back t...

EulerOS Virtualization 2.13.0 : kernel (EulerOS-SA-2025-2609)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : x86/mce: Work around an erratum on fast string copy instructionsCVE-2022-49124 net: preserve skbendoffset in...

EulerOS Virtualization 2.13.1 : kernel (EulerOS-SA-2025-2623)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : x86/mce: Work around an erratum on fast string copy instructionsCVE-2022-49124 net: preserve skbendoffset in...