SUSE CVE-2023-53387

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix device management cmd timeout flow In the UFS error handling flow, the host will send a device management cmd NOP OUT to the device for link recovery. If this cmd times out and clearing the doorbell fails,...

Linux Distros Unpatched Vulnerability : CVE-2023-53387

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: ufs: core: Fix device management cmd timeout flow In the UFS error handling flow, the host will send a device management cmd NOP OUT to the device for lin...

DEBIAN-CVE-2023-53387

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix device management cmd timeout flow In the UFS error handling flow, the host will send a device management cmd NOP OUT to the device for link recovery. If this cmd times out and clearing the doorbell fails,...

CVE-2023-53387 scsi: ufs: core: Fix device management cmd timeout flow

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix device management cmd timeout flow In the UFS error handling flow, the host will send a device management cmd NOP OUT to the device for link recovery. If this cmd times out and clearing the doorbell fails,...

CVE-2023-53387 scsi: ufs: core: Fix device management cmd timeout flow

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix device management cmd timeout flow In the UFS error handling flow, the host will send a device management cmd NOP OUT to the device for link recovery. If this cmd times out and clearing the doorbell fails,...

CVE-2023-53387

CVE-2023-53387 affects the Linux kernel in the SCSI UFS path (ufshcd). In the UFS error handling flow, a device management command (NOP OUT) timeout can leave hba->dev_cmd.complete not NULL; if the device later completes the command, complete() is invoked for a stack-allocated structure, causi...

kernel: Linux kernel: Denial of Service in UFS subsystem

A flaw was found in the Linux kernel's Universal Flash Storage UFS subsystem. A local attacker with low privileges could trigger a vulnerability during the handling of UFS device management command timeouts. If a command times out and its doorbell fails to clear, a subsequent completion can lead ...