186 matches found
scsi: qla2xxx: Free sp in error path to fix system crash
...
Linux SCSI device support driver Heap Buffer Overflow DoS
The vulnerability of the lpfcissueelsflogi function in the drivers/scsi/lpfc/lpfcels.c file of the Linux SCSI device support driver leads to a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure...
lpfc_rcv_plogi() Function DoS
Vulnerability of the lpfcrcvplogi function in the drivers/scsi/lpfc/lpfcnportdisc.c module – The Linux SCSI device driver has a vulnerability related to improper memory release. Exploiting this vulnerability could allow an attacker to cause service failure...
Improper Certificate Validation
Overview Affected versions of this package are vulnerable to Improper Certificate Validation due to the DefaultConfig function, which sets TlsInsecureSkipVerify to true, disabling TLS certificate verification for all outgoing storage driver communications. An attacker can intercept and manipulate...
qla2xxx_process_purls_iocb Heap Buffer Overflow DoS
The vulnerability of the qla2xxxprocesspurlsiocb function in the drivers/scsi/qla2xxx/qlanvme.c driver for Linux SCSI device drivers is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
GHSA-WF93-3GHH-H389 OpenList has Insecure TLS Default Configuration
Summary The application disables TLS certificate verification by default for all outgoing storage driver communications, making the system vulnerable to Man-in-the-Middle MitM attacks. This enables the complete decryption, theft, and manipulation of all data transmitted during storage operations,...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003380)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003380 advisory. The uas driver in the Linux kernel before 4.13.6 allows local users to cause a denial of service out-of- bounds read and system crash or possibly have unspecified...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993303)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993303 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Perform lockless command completion in abort path While adding and removing the...
scsi: smartpqi: Fix device resources accessed after device removal
...
kernel: scsi: qla2xxx: Wait for io return on terminate rport
A flaw was found in the Linux kernel’s SCSI driver component qla2xxx used with FCP-2 devices. When the terminaterportio function is invoked , the driver may exit cleanup before all outstanding I/O operations have returned. This can lead to a use-after-free condition when resources are freed while...
Astra Linux - уязвимость в linux-5.15
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted A use-after-free crash can occur after an ELS LOGO is aborted. Specifically, a nodelist structure is freed and then ndlp-vport-cfglogverbose is dereferenced in...
Linux Distros Unpatched Vulnerability : CVE-2025-40345
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: storage: sddr55: Reject out-of-bound newpba Discovered by Atuin - Automated Vulnerability Discovery Engine. newpba comes from the status packet returned...
Storage VSP Driver Windows Privilege Escalation
The vulnerability of the Storage VSP Driver for Windows operating systems is related to the lack of authentication for a critical function. Exploiting this vulnerability can allow an attacker to increase their privileges...
Storage VSP Driver Windows Privilege Escalation
The vulnerability of the Storage VSP Driver for Windows operating systems is related to access control errors. Exploiting this vulnerability can allow attackers to increase their privileges...
CVE-2025-59516
CVE-2025-59516 is a Windows Storage VSP Driver elevation-of-privilege vulnerability. The issue is described as missing authentication for a critical function, enabling an authorized local attacker to elevate privileges. Public references in connected documents confirm the affected component is th...
CVE-2025-59516 Windows Storage VSP Driver Elevation of Privilege Vulnerability
...
CVE-2025-59517 Windows Storage VSP Driver Elevation of Privilege Vulnerability
...
EUVD-2025-202232
Improper access control in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally...
CVE-2025-59517
CVE-2025-59517 is a Windows Storage VSP Driver elevation of privilege vulnerability caused by improper access control. Exploitation would enable a locally authenticated attacker to elevate privileges on affected Windows systems. Connected documents confirm this is tied to the Windows Storage VSP ...