sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export

A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev...

sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export

A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev...

sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export

A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev...

sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export

A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev...

SUSE-SU-2026:3790-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item bsc1255703. - CVE-2025-68818: scsi: Revert 'scsi: qla2xxx: Perform lockless command completion in abort...

The vulnerability of the scsi_queue_rq() function in the drivers/scsi/scsi_lib.c module of the Linux operating system’s SCSI device driver allows a attacker to compromise the integrity of protected information or cause service failures.

The vulnerability of the scsiqueuerq function in the drivers/scsi/scsilib.c module of the Linux SCSI device driver involves synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected information or cause service...

The vulnerability of the pm8001_queue_command() function in the drivers/scsi/pm8001/pm8001_sas.c module of the Linux operating system’s SCSI device driver allows a hacker to cause a service failure.

The vulnerability of the pm8001queuecommand function in the drivers/scsi/pm8001/pm8001sas.c module of the Linux SCSI device driver lies in the use of memory after it has been freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `scsi_alloc_sdev()` function in the `drivers/scsi/scsi_scan.c` driver for SCSI devices in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the scsiallocsdev function in the drivers/scsi/scsiscan.c driver for SCSI devices in Linux operating systems is related to errors during link counters updates. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the qla2xxxpci_error_detected() function in the drivers/scsi/qla2xxx/qla_os.c driver module allows a hacker to trigger a service failure.

The vulnerability of the qla2xxxpcierrordetected function in the drivers/scsi/qla2xxx/qlaos.c driver module for Linux SCSI devices is related to error handling flaws. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the `ibmvfc_discover_targets_done()` function in the `drivers/scsi/ibmvscsi/ibmvfc.c` file of the Linux SCSI device driver module allows a attacker to access protected information or cause a service failure.

The vulnerability of the ibmvfcdiscovertargetsdone function in the drivers/scsi/ibmvscsi/ibmvfc.c file of the Linux SCSI device driver module is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to access protected...

EulerOS Virtualization 2.13.1 : qemu (EulerOS-SA-2026-3205)

According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input...

AlmaLinux 10 : qemu-kvm (ALSA-2026:58571)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:58571 advisory. qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling CVE-2026-48914 Bug Fixes and Enhancements: qemu-kvm hung during drain after double pause...

CVE-2026-74702

A flaw was found in the vhost-scsi component of the Linux kernel. This vulnerability allows a local attacker to cause a denial of service DoS by changing virtio feature bits after the vhost-scsi endpoint has been activated. Specifically, enabling the T10-PI feature after setup can lead to an...

qemu-kvm security, bug fix, and enhancement update

An update is available for qemu-kvm. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Kernel-based Virtual Machine KVM is a full virtualization solution for Linu...

RLSA-2026:58571 Moderate: qemu-kvm security, bug fix, and enhancement update

Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Security Fixes: qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling...

CVE-2026-74703

A flaw was found in the Linux kernel's vhost-scsi component. When T10 Protection Information PI is negotiated, a remote attacker could send a specially crafted request with malformed scatterlist counts. This could lead to an invalid memory allocation operation, triggering a kernel panic and...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fixed the use of memory after freeing it in scsihexpandernoderemove. The function mpt3sastransportportremove called in scsihexpandernoderemove frees the port field of the sasexpander structure. This leads to a...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Implement a reference counter for SRB The timeout handler and the done function are competing with each other. When qla2x00asynciocbtimeout starts to execute, it may be preempted by the normal response path via the...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: scsi: qla2xxx: Fixed premature hardware access after a PCI error After a recoverable PCI error is detected and resolved, the qla driver needs to check whether the error condition still exists and/or wait for the operating syst...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: scsi: qla2xxx: Fixed the warning message caused by adisc being flushed. The Linux kernel triggered a warning message where a different error code type did not match the expected type. Added additional translations for one erro...