CVE-2026-99153

A flaw was found in the Linux kernel's SCSI subsystem within the libiscsi module. A malicious or compromised iSCSI storage target can trigger a denial of service DoS or data integrity issues by sending a crafted Reject Protocol Data Unit PDU containing an unvalidated Initiator Task Tag ITT. Becau...

CVE-2026-98232

A flaw was found in the Linux kernel's SCSI subsystem. This vulnerability allows a malicious USB storage device to achieve arbitrary code execution or disclose sensitive kernel memory. By returning malformed MODE SENSE length values for a device advertising Command Duration Limits CDL support, an...

CLSA-2026-1773832495 Fix of 132 CVEs

CVE-2023-53515 - virtio-mmio: don't break lifecycle of vmdev CVE-2023-53515 CVE-2025-39967 - fbcon: fix integer overflow in fbcondosetfont CVE-2025-39967 - fbcon: Fix OOB access in font allocation CVE-2025-39967 CVE-2025-38702 - fbdev: fix potential buffer overflow in doregisterframebuffer...

CVE-2026-93781

A flaw was found in the Linux kernel's SCSI Small Computer System Interface subsystem, which can lead to a Denial of Service DoS. During device error recovery, the error handling mechanism attempts to allocate request tags while all available tags are held by pending commands waiting for recovery...

CVE-2026-98545

A flaw was found in the Linux kernel's libata SCSI subsystem. When processing ATA pass-through commands to an ATAPI storage device, the kernel fails to properly validate the length byte returned in the device's sense response buffer. A malicious or faulty device can exploit this issue to trigger...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix use-after-free in pm8001queuecommand The commit e29c47fe8946 “scsi: pm8001: Simplify pm8001taskexec” includes modifications to pm8001queuecommand. However, it introduces a potential cause of a double-free...

CLSA-2025-1738592614 kernel: Fix of 27 CVEs

xsk: fix OOB map writes when deleting elements CVE-2024-56614 - hvsock: Initializing vsk-trans to NULL to prevent a dangling pointer CVE-2024-53103 - scsi: sg: Fix slab-use-after-free read in sgrelease CVE-2024-56631 - net: inet: do not leave a dangling sk pointer in inetcreate CVE-2024-56601 -...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: A fix was made for NULL pointer access in mpt3sastransportportadd. The port is allocated using sasportallocnum, and the RPHY is allocated via either sasenddevicealloc or sasexpanderalloc. Both of these functions ma...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Fix refcount issue when LOGO is received during TMF A hung task trace was observed during LOGO processing. 974.309060 0000:00:00.0: qedfehdevicereset:868: 1:0:2:0: LUN RESET issued… 974.309065 0000:00:00.0:...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: ibmvfc: Store the vhost pointer during subcrq allocation Currently, the back pointer from a queue to the vhost adapter is not set until after the subcrq interrupt registration. This value becomes available when a queue is...

Ubuntu 14.04 LTS / 16.04 LTS : Linux kernel vulnerabilities (USN-8923-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8923-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

USN-8923-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - SCSI subsystem; - Bluetooth subsystem; CVE-2022-49111, CVE-2022-49114...

USN-8923-1 linux, linux-aws, linux-fips, linux-kvm, linux-lts-xenial vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - SCSI subsystem; - Bluetooth subsystem; CVE-2022-49111, CVE-2022-49114...

CVE-2026-90267

A flaw was found in the Linux kernel's SCSI subsystem. When handling UNMAP and WRITE SAME commands, a memory leak can occur if the scsiallocsgtables function fails after a special payload page has been allocated. This oversight prevents the proper deallocation of the page, leading to a memory lea...

PT-2026-98615

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iSCSI target of the SCSI subsystem where a LUN RESET a command used to reset a Logical Unit that aborts a WRITE command in the TRANSPORT WRITE PENDING state can...

PT-2026-94616

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An error handling issue exists in the sd probe function within the SCSI subsystem. When sd large pool create fails after device add&sdkp-disk dev has already succeeded, the system fails ...

PT-2026-94615

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the SCSI subsystem when scsi alloc sgtables fails. The function sd set special bvec allocates a special payload page for UNMAP and WRITE SAME commands. If a...

PT-2026-93503

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak occurs in the qla2xxx driver within the SCSI subsystem. The function qla28xx validate flash image unconditionally returns QLA SUCCESS, signaling to the FC BSG transport...

CVE-2026-74754 scsi: core: pair EH runtime PM get and put

In the Linux kernel, the following vulnerability has been resolved: scsi: core: pair EH runtime PM get and put shost-ehnoresume is currently consulted twice in one error handling iteration: once before scsiautopmgethost and once again before scsiautopmputhost. That is racy when a PM-triggered err...

ROS-20260821-73-0036

The vulnerability of the lpfcunregisterfcfrescan function in the drivers/scsi/lpfc/lpfchbadisc.c file of the Linux kernel’s SCSI subsystem is related to the dereferencing of a null pointer due to concurrent access to resources race condition. Exploiting this vulnerability could allow an attacker ...