GSD-2022-1008216 scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus()

scsi: target: tcmloop: Fix possible name leak in tcmloopsetuphbabus This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.267 by commit...

GSD-2022-1008139 scsi: zfcp: Fix double free of FSF request when qdio send fails

scsi: zfcp: Fix double free of FSF request when qdio send fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.225 by commit...

GSD-2022-1008136 scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus()

scsi: target: tcmloop: Fix possible name leak in tcmloopsetuphbabus This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.225 by commit...

GSD-2022-1008062 scsi: scsi_transport_sas: Fix error handling in sas_phy_add()

scsi: scsitransportsas: Fix error handling in sasphyadd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.157 by commit...

GSD-2022-1008030 scsi: zfcp: Fix double free of FSF request when qdio send fails

scsi: zfcp: Fix double free of FSF request when qdio send fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.156 by commit...

GSD-2022-1008026 scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus()

scsi: target: tcmloop: Fix possible name leak in tcmloopsetuphbabus This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.156 by commit...

GSD-2022-1007926 scsi: scsi_transport_sas: Fix error handling in sas_phy_add()

scsi: scsitransportsas: Fix error handling in sasphyadd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.80 by commit...

GSD-2022-1007889 scsi: zfcp: Fix double free of FSF request when qdio send fails

scsi: zfcp: Fix double free of FSF request when qdio send fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.80 by commit...

GSD-2022-1007882 scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus()

scsi: target: tcmloop: Fix possible name leak in tcmloopsetuphbabus This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.80 by commit...

GSD-2022-1007710 scsi: zfcp: Fix double free of FSF request when qdio send fails

scsi: zfcp: Fix double free of FSF request when qdio send fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...

GSD-2022-1007700 scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus()

scsi: target: tcmloop: Fix possible name leak in tcmloopsetuphbabus This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...

PT-2022-36285 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 2.6.34 through 5.10.155 Description: The issue is related to a double free of FSF request when qdio send fails in the zfcp scsi module. The actual impact and attack plausibility have not yet been proven. Recommendations:...

OracleVM 3.4 : kernel-uek (OVMSA-2022-0031)

The remote OracleVM system is missing necessary patches to address security updates: - In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can lead to a use-after-free in btrfsqueuework in fs/btrfs/async-thread.c. CVE-2019-19377 - Ther...

Unbreakable Enterprise kernel security update

4.1.12-124.69.5 - x86/smpboot: check cpuinitializedmask first after returning from schedule Dongli Zhang Orabug: 34798594 4.1.12-124.69.4 - btrfs: Remove BUGON as it is causing kernel to panic Rhythm Mahajan Orabug: 34840579 4.1.12-124.69.3 - btrfs: fix missing return for a non-void function...

CLSA-2022-1670261781 Fix of 13 CVEs

CVE-2022-42703 - mm/rmap.c: don't reuse anonvma if we just want a copy - mm: rmap: explicitly reset vma-anonvma in unlinkanonvmas - mm, rmap: handle anonvmaprepare common case inline - mm/rmap: Fix anonvma-degree ambiguity leading to double-reuse CVE-2022-3565 - mISDN: fix use-after-free bugs in...

PT-2025-53031

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the efct device init function within the Linux kernel. Specifically, when efct scsi reg fc transport fails, the efct scsi tgt driver exit function is not called,...

Use After Free

linux-oracle, linux-azure, linux-aws, linux-gcp, linux-kvm, linux-dell300x is vulnerable to free of use. The vulnerability exists in drivers/scsi/stex.c because it allows local users to obtain sensitive information from kernel memory because stexqueuecommandlck lacks a memset...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-5728-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5728-1 advisory. Jann Horn discovered that the Linux kernel did not properly track memory allocations for anonymous VMA mappings in some situations, leading t...

kernel: scsi: scsi_debug: Fix type in min_t to avoid stack OOB

A vulnerability was found in the Linux kernel's SCSI driver, in sgcopybuffer function, where an incorrect type in the mint macro can lead to a stack out-of-bounds condition. This occurs due to sign extension of larger values, which may result in memory corruption or DoS...

kernel: scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE

A flaw was found in the lpfc module in the Linux kernel. A missing release of allocated memory when an error occurs will cause a memory leak, potentially impacting system performance and resulting in a denial of service...