CVE-2025-68745

CVE-2025-68745 relates to Linux kernel SCSI QLA2XXX handling. Public details describe that commits related to offline port handling and host reset handling (scsi: qla2xxx: target: Fix offline port handling and host reset handling) and a subsequent fix for missed DMA unmaps (scsi: qla2xxx: Fix mis...

CVE-2025-68741

CVE-2025-68741 (Linux kernel, QLA2XXX SCSI path) : The issue arises in qla2xxx_process_purls_iocb() where items allocated by qla27xx_copy_multiple_pkt() via qla24xx_alloc_purex_item() could be freed with kfree(), which is incorrect for pre‑allocated items and risks memory corruption. The fix is t...

EUVD-2011-0655

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986837)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986837 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: iscsitcp: Fix UAF during login when accessing the shost ipaddress If during...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-380019)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-380019 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: Revert scsi: fcoe: Fix potential deadlock on &fip-ctlrlock This reverts commit...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986948)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986948 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix use-after-free for aborted TMF sastask Currently a use-after-free may occur if ...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986385)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986385 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: iscsitcp: Fix UAF during login when accessing the shost ipaddress If during...

EUVD-2022-55303

Malicious code in bioql PyPI...

EUVD-2025-26774

Malicious code in bioql PyPI...

scsi: mpi3mr: Avoid memcpy field-spanning write WARNING

...

SUSE CVE-2023-53464

In the Linux kernel, the following vulnerability has been resolved: scsi: iscsitcp: Check that sock is valid before iscsisetparam The validity of sock should be checked before assignment to avoid incorrect values. Commit 57569c37f0ad "scsi: iscsi: iscsitcp: Fix null-ptr-deref while calling...

CVE-2022-50467

CVE-2022-50467 affects the Linux kernel LPFC SCSI driver (lpfc). The vulnerability arises in lpfc_cmpl_ct_cmd_gft_id() where an abnormal exit path could call lpfc_nlp_put() with a null pointer to a nodelist structure, risking a null dereference. The changelog indicates the root cause was a missin...

SUSE-SU-2025:03301-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-46733: btrfs: fix qgroup reserve leaks in cowfilerange bsc1230708. - CVE-2024-49996: cifs: Fix buffer overflow when parsing NFS reparse points bsc1232089. -...

CVE-2025-39803

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Remove WARNONONCE call from ufshcduiccmdcompl The UIC completion interrupt may be disabled while an UIC command is being processed. When the UIC completion interrupt is reenabled, an UIC interrupt is triggered an...

DEBIAN-CVE-2025-38695

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Check for hdwq null ptr when cleaning up lpfcvport structure If a call to lpfcsli4readrev from lpfcsli4hbasetup fails, the resultant cleanup routine lpfcsli4vportdeletefcpxriaborted may occur before sli4hba.hdwqs are...

CVE-2025-38700

Concrete details found in connected documents confirm CVE-2025-38700 affects the Linux kernel's SCSI libiscsi path (iscsi_conn->dd_data) during iSER setup when ib_fast_reg_mr allocation fails. The root cause is unconditional initialization of iscsi_conn->dd_data when dd_size may be 0, leadi...

scsi: ufs: core: Add NULL check in ufshcd_mcq_compl_pending_transfer()

...

scsi: lpfc: Protect memory leak for NPIV ports sending PLOGI_RJT

...

CVE-2022-50027 scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE There is no corresponding free routine if lpfcsli4issuewqe fails to issue the CMF WQE in lpfcissuecmfsyncwqe. If retval is non-zero, then free the iocbq request...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: mcq: A NULL check was added in ufshcdmcqabort. A race may occur between the MCQ completion path and the abort handler. Once a request is completed, blkmqfreerequest sets rq-mqhctx to NULL. This means that the subsequen...