CVE-2025-38691 pNFS: Fix uninited ptr deref in block/scsi layout

In the Linux kernel, the following vulnerability has been resolved: pNFS: Fix uninited ptr deref in block/scsi layout The error occurs on the third attempt to encode extents. When function exttreepreparecommit reallocates a larger buffer to retry encoding extents, the "layoutupdatepages" page arr...

scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI

...

scsi: core: Fix a use-after-free

...

scsi: ufs: core: Add NULL check in ufshcd_mcq_compl_pending_transfer()

...

scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths

...

scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()

...

scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue

...

scsi: ufs: core: Fix use-after free in init error and remove paths

...

CVE-2025-38695: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Check for hdwq null ptr when cleaning up lpfcvport structure If a call to lpfcsli4readrev from lpfcsli4hbasetup fails, the resultant cleanup routine lpfcsli4vportdeletefcpxriaborted may occur before sli4hba.hdwqs are...

CVE-2025-38699: Double Free

In the Linux kernel, the following vulnerability has been resolved: scsi: bfa: Double-free fix When the bfadimprobe function fails during initialization, the memory pointed to by bfad-im is freed without setting bfad-im to NULL. Subsequently, during driver uninstallation, when the state machine...

Oracle Linux 8 : kernel (ELSA-2025-15008)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-15008 advisory. - scsi: lpfc: Use memcpy for BIOS version Ewan D. Milne RHEL-105927 CVE-2025-38332 - RDMA/iwcm: Fix use-after-free of work objects after cmid...

CVE-2025-38691: Use of Uninitialized Resource

In the Linux kernel, the following vulnerability has been resolved: pNFS: Fix uninited ptr deref in block/scsi layout The error occurs on the third attempt to encode extents. When function exttreepreparecommit reallocates a larger buffer to retry encoding extents, the "layoutupdatepages" page arr...

scsi: lpfc: Protect memory leak for NPIV ports sending PLOGI_RJT

...

kernel: scsi: lpfc: Use memcpy() for BIOS version

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Use memcpy for BIOS version The strlcat with FORTIFY support is triggering a panic because it thinks the target buffer will overflow although the correct target buffer size is passed in. Anyway, instead of memset with...

RHEL 8 : kernel (RHSA-2025:15008)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:15008 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: RDMA/iwcm: Fix use-after-free...

Linux Distros Unpatched Vulnerability : CVE-2022-49839

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: scsitransportsas: Fix error handling in sasphyadd If transportadddevice fails in sasphyadd, the kernel will crash trying to delete the device in...

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: RDMA/iwcm: Fix use-after-free of work objects after cmid destruction CVE-2025-38211 kernel: scsi: lpfc: Use memcpy for BIOS version CVE-2025-38332 kernel: tipc: Fix use-after-free in...

ALSA-2025:15008 Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: RDMA/iwcm: Fix use-after-free of work objects after cmid destruction CVE-2025-38211 kernel: scsi: lpfc: Use memcpy for BIOS version CVE-2025-38332 kernel: tipc: Fix use-after-free in...

Linux Distros Unpatched Vulnerability : CVE-2018-12892

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Xen 4.7 through 4.10.x. libxl fails to pass the readonly flag to qemu when setting up a SCSI disk, due to what was probably an...

Linux Distros Unpatched Vulnerability : CVE-2021-47216

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: advansys: Fix kernel pointer leak Pointers should be printed with %p or %px rather than cast to 'unsigned long' and printed with %lx. Change %lx to %p to...