CVE-2023-53128: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix throttlegroups memory leak Add a missing kfree...

CVE-2023-53120: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix config page DMA memory leak A fix for: DMA-API: pci 0000:83:00.0: device driver has pending DMA allocations while released from device count=1...

CVE-2023-53127: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix expander node leak in mpi3mrremove Add a missing resource clean up in .remove...

CVE-2023-53126: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix sashba.phy memory leak in mpi3mrremove Free mrioc-sashba.phy at .remove...

PT-2025-18892

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue in the Linux kernel has been resolved. The issue was related to the scsi: mpi3mr component, where a missing kfree call was causing the memory leak. Recommendations At...

DEBIAN-CVE-2022-49780

In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcmloop: Fix possible name leak in tcmloopsetuphbabus If deviceregister fails in tcmloopsetuphbabus, the name allocated by devsetname need be freed. As comment of deviceregister says, it should use putdevice to give...

UBUNTU-CVE-2022-49839

In the Linux kernel, the following vulnerability has been resolved: scsi: scsitransportsas: Fix error handling in sasphyadd If transportadddevice fails in sasphyadd, the kernel will crash trying to delete the device in transportremovedevice called from sasremovehost. Unable to handle kernel NULL...

UBUNTU-CVE-2022-49780

In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcmloop: Fix possible name leak in tcmloopsetuphbabus If deviceregister fails in tcmloopsetuphbabus, the name allocated by devsetname need be freed. As comment of deviceregister says, it should use putdevice to give...

CVE-2022-49839

In the Linux kernel, the following vulnerability has been resolved: scsi: scsitransportsas: Fix error handling in sasphyadd If transportadddevice fails in sasphyadd, the kernel will crash trying to delete the device in transportremovedevice called from sasremovehost. Unable to handle kernel NULL...

CVE-2022-49839

CVE-2022-49839 : In the Linux kernel, the scsi_transport_sas path sas_phy_add() could crash if transport_add_device() failed, since error handling did not account for a NULL device during transport_remove_device() invoked from sas_remove_host(). The issue is mitigated by the upstream fix to check...

CVE-2022-49839 scsi: scsi_transport_sas: Fix error handling in sas_phy_add()

In the Linux kernel, the following vulnerability has been resolved: scsi: scsitransportsas: Fix error handling in sasphyadd If transportadddevice fails in sasphyadd, the kernel will crash trying to delete the device in transportremovedevice called from sasremovehost. Unable to handle kernel NULL...

CVE-2022-49839 scsi: scsi_transport_sas: Fix error handling in sas_phy_add()

In the Linux kernel, the following vulnerability has been resolved: scsi: scsitransportsas: Fix error handling in sasphyadd If transportadddevice fails in sasphyadd, the kernel will crash trying to delete the device in transportremovedevice called from sasremovehost. Unable to handle kernel NULL...

CVE-2022-49789

In the Linux kernel, the following vulnerability has been resolved: scsi: zfcp: Fix double free of FSF request when qdio send fails We used to use the wrong type of integer in 'zfcpfsfreqsend' to cache the FSF request ID when sending a new FSF request. This is used in case the sending fails and w...

CVE-2022-49780

In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcmloop: Fix possible name leak in tcmloopsetuphbabus If deviceregister fails in tcmloopsetuphbabus, the name allocated by devsetname need be freed. As comment of deviceregister says, it should use putdevice to give...

Linux SCSI DoS

The vulnerability of the SCSI component in the Linux operating system is related to a memory leak in the qedfallocandinitsb function. Exploiting this vulnerability can allow an attacker to cause a service failure...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free of encap entry in neigh update handler CVE-2021-47247 In the Linux kernel, the following vulnerability has been resolved: i2c: dev: check return value when calling devsetname...

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2024-27415: netfilter: brnetfilter: skip conntrack input hook for promisc packets bsc1224757. CVE-2024-50038: netfilter: xtables: fix typo causing so...

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2024-27415: netfilter: brnetfilter: skip conntrack input hook for promisc packets bsc1224757. CVE-2024-50038: netfilter: xtables: fix typo causing so...

SUSE-SU-2025:20283-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-27415: netfilter: brnetfilter: skip conntrack input hook for promisc packets bsc1224757. - CVE-2024-50038: netfilter: xtables: fix typo causin...

PT-2025-29009

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a potential use-after-free issue within the dev loss tmo callbk function in the SCSI Low-Level Fibre Channel lpfc driver. Smatch, a static analysis tool,...