UBUNTU-CVE-2026-74754

In the Linux kernel, the following vulnerability has been resolved: scsi: core: pair EH runtime PM get and put shost-ehnoresume is currently consulted twice in one error handling iteration: once before scsiautopmgethost and once again before scsiautopmputhost. That is racy when a PM-triggered err...

CVE-2026-74754

In the Linux kernel, the following vulnerability has been resolved: scsi: core: pair EH runtime PM get and put shost-ehnoresume is currently consulted twice in one error handling iteration: once before scsiautopmgethost and once again before scsiautopmputhost. That is racy when a PM-triggered err...

CVE-2026-74754

CVE-2026-74754 is a race condition in the Linux kernel SCSI core. The shost->eh_noresume flag is consulted twice per error-handling (EH) iteration—once before scsi_autopm_get_host() and once before scsi_autopm_put_host(). If a power-management path (e.g., ufshcd_set_dev_pwr_mode()) flips this ...

CVE-2026-74754 scsi: core: pair EH runtime PM get and put

In the Linux kernel, the following vulnerability has been resolved: scsi: core: pair EH runtime PM get and put shost-ehnoresume is currently consulted twice in one error handling iteration: once before scsiautopmgethost and once again before scsiautopmputhost. That is racy when a PM-triggered err...

EUVD-2026-66584

In the Linux kernel, the following vulnerability has been resolved: scsi: core: pair EH runtime PM get and put shost-ehnoresume is currently consulted twice in one error handling iteration: once before scsiautopmgethost and once again before scsiautopmputhost. That is racy when a PM-triggered err...

CVE-2026-74754 scsi: core: pair EH runtime PM get and put

In the Linux kernel, the following vulnerability has been resolved: scsi: core: pair EH runtime PM get and put shost-ehnoresume is currently consulted twice in one error handling iteration: once before scsiautopmgethost and once again before scsiautopmputhost. That is racy when a PM-triggered err...

SUSE-SU-2026:3810-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item bsc1255703. - CVE-2025-68818: scsi: Revert 'scsi: qla2xxx: Perform lockless command completion in...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098691)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098691 advisory. In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: protect vq-logused with vq-mutex The vhost-scsi completion path may access vq-logbas...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098851)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098851 advisory. In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Fix handling of multiple calls to vhostscsisetendpoint If vhostscsisetendpoint is...

CVE-2026-74754: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: scsi: core: pair EH runtime PM get and put shost-ehnoresume is currently consulted twice in one error handling iteration: once before scsiautopmgethost and once again before scsiautopmputhost. That is racy when a PM-triggered err...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098677)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098677 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Improve SCSI abort handling The following has been observed on a test setup:...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098701)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098701 advisory. In the Linux kernel, the following vulnerability has been resolved: ata: libata-sff: Ensure that we cannot write outside the allocated buffer reveliofuzzing reported...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098792)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098792 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: configfs: Bound snprintf return in tgptgpmembersshow targettgptgpmembersshow format...

PT-2026-82134

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the SCSI core error handling EH process. The system checks the shost-eh noresume variable twice during a single error handling iteration: once before calling...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098842)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098842 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: sd: fix missing putdisk when deviceadd&diskdev fails If deviceadd&sdkp-diskdev fails,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098843)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098843 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix handling of lrbp-cmd ufshcdqueuecommand may be called two times in a row for...

The vulnerability of the qla24xx_els_dcmd_iocb() function in the drivers/scsi/qla2xxx/qla_iocb.c driver for SCSI devices in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the qla24xxelsdcmdiocb function in the drivers/scsi/qla2xxx/qlaiocb.c driver for Linux SCSI device drivers is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098736)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098736 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix recursive locking in configfsopenfile In flushwritebuffer, &p-fragsem is acquir...

Linux Distros Unpatched Vulnerability : CVE-2026-74754

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: core: pair EH runtime PM get and put shost-ehnoresume is currently consulted twice in one error handling iteration: once before scsiautopmgethost and once...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104559)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104559 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE...