scsi: aic94xx: fix use-after-free in device removal path

...

CVE-2025-68818

A NULL pointer dereference flaw was found in the QLogic Fibre Channel HBA driver qla2xxx in the Linux kernel. During ISP error recovery, the abort path incorrectly assumes all command types are TYPESRB. When operating in SCSI target mode with TYPETGTCMD commands, this results in calling a NULL...

kernel: scsi: qla2xxx: Wait for io return on terminate rport

A flaw was found in the Linux kernel’s SCSI driver component qla2xxx used with FCP-2 devices. When the terminaterportio function is invoked , the driver may exit cleanup before all outstanding I/O operations have returned. This can lead to a use-after-free condition when resources are freed while...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

kernel: scsi: ses: Fix possible desc_ptr out-of-bounds accesses

A bounds-checking flaw was found in the Linux kernel Small Computer System Interface Enclosure Services driver in the way descriptor pointers are validated while processing enclosure data. Missing checks could allow an out-of-bounds access during parsing. A local user could use this flaw to crash...

SUSE CVE-2025-68782

In the Linux kernel, the following vulnerability has been resolved: scsi: target: Reset ttaskcdb pointer in error case If allocation of cmd-ttaskcdb fails, it remains NULL but is later dereferenced in the 'err' path. In case of error, reset NULL ttaskcdb value to point at the default fixed-size...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003242)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003242 advisory. drivers/scsi/libsas/sasscsihost.c in the Linux kernel before 4.16 allows local users to cause a denial of service ata qc leak by triggering certain failure condition...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002651)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002651 advisory. The arcmsriopmessagexfer function in drivers/scsi/arcmsr/arcmsrhba.c in the Linux kernel through 4.8.2 does not restrict a certain length field, which allows local...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002759)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002759 advisory. drivers/scsi/libsas/sasscsihost.c in the Linux kernel before 4.16 allows local users to cause a denial of service ata qc leak by triggering certain failure condition...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003152)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003152 advisory. An elevation of privilege vulnerability in the kernel scsi driver. Product: Android. Versions: Android kernel. Android ID A-65023233. Tenable has extracted the...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002347)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002347 advisory. Array index error in the tcmvhostmaketpg function in drivers/vhost/scsi.c in the Linux kernel before 4.0 might allow guest OS users to cause a denial of service memo...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003441)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003441 advisory. The srdoioctl function in drivers/scsi/srioctl.c in the Linux kernel through 4.16.12 allows local users to cause a denial of service stack-based buffer overflow or...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003200)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003200 advisory. The biomapuseriov and biounmapuser functions in block/bio.c in the Linux kernel before 4.13.8 do unbalanced refcounting when a SCSI I/O vector has small consecutive...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002579)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002579 advisory. The Serial Attached SCSI SAS implementation in the Linux kernel through 4.15.9 mishandles a mutex within libsas, which allows local users to cause a denial of servic...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002159)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002159 advisory. Array index error in the tcmvhostmaketpg function in drivers/vhost/scsi.c in the Linux kernel before 4.0 might allow guest OS users to cause a denial of service memo...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003325)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003325 advisory. The srdoioctl function in drivers/scsi/srioctl.c in the Linux kernel through 4.16.12 allows local users to cause a denial of service stack-based buffer overflow or...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003447)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003447 advisory. The biomapuseriov and biounmapuser functions in block/bio.c in the Linux kernel before 4.13.8 do unbalanced refcounting when a SCSI I/O vector has small consecutive...

EulerOS 2.0 SP10 : kernel (EulerOS-SA-2026-1029)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : scsi: ses: Fix slab-out-of-bounds in sesintfremoveCVE-2023-53521 binfmtmisc: fix shift-out-of-bounds in checkspecialflagsCVE-2022-50497 scsi: lpfc...

EulerOS 2.0 SP12 : kernel (EulerOS-SA-2026-1091)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : net: drop UFO packets in udprcvsegmentCVE-2025-38622 A transient execution vulnerability in some AMD processors may allow an attacker to infer dat...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003387)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003387 advisory. The sgioctl function in drivers/scsi/sg.c in the Linux kernel through 4.10.4 allows local users to cause a denial of service stack-based buffer overflow or possibly...