ROOT-OS-DEBIAN-11-CVE-2023-53627 CVE-2023-53627 in linux - Patched by Root

Root has patched CVE-2023-53627 in the linux package for Root:Debian:11. Multiple fixed versions available...

CVE-2023-53627

In the Linux kernel, the following vulnerability has been resolved: scsi: hisisas: Grab sasdev lock when traversing the members of sasdev.list When freeing slots in function slotcompletev3hw, it is possible that sasdev.list is being traversed elsewhere, and it may trigger a NULL pointer exception...

CVE-2023-53627

CVE-2023-53627 affects the Linux kernel SCSI driver histi_sas. The root cause is a race on sas_dev.list traversal during slot freeing in dereg_device_v3_hw() and hisi_sas_release_tasks(), which can trigger a NULL pointer dereference and kernel panic. The mitigation is to grab the sas_dev lock whi...