CVE-2026-45997

CVE-2026-45997 concerns the Linux kernel SCSI disk driver (sd). The issue arises when device_add(&sdkp->disk_dev) fails during sd_probe; as a result, put_device() calls lead to scsi_disk_release() freeing the scsi_disk but leaving the gendisk referenced. The fix adds a missing put_disk(gd) in ...

Linux Distros Unpatched Vulnerability : CVE-2022-50827

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: lpfc: Fix memory leak in lpfccreateport Commit 5e633302ace1 scsi: lpfc: vmid: Add support for VMID in mailbox command introduced allocations for the VMID...

Linux Distros Unpatched Vulnerability : CVE-2023-53078

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: scsidhalua: Fix memleak for 'qdata' in aluaactivate If aluartpgqueue failed from aluaactivate, then 'qdata' is not freed, which will cause following...

Linux Distros Unpatched Vulnerability : CVE-2025-38288

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Fix smpprocessorid call trace for preemptible kernels Correct kernel call...

Linux Distros Unpatched Vulnerability : CVE-2024-35954

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Avoid sg device teardown race sgremovesfpusercontext must not use sgdevicedestroy...

CVE-2019-19965

A NULL pointer dereference flaw was found in the Linux kernel’s SCSI disk subsystem. A local user could use this flaw to crash the system, causing a denial of service. Mitigation To mitigate this issue, prevent module libsas from being loaded. Please see for how to blacklist a kernel module to...

QEMU scsi denial of service vulnerability (CNVD-2016-03666)

QEMU is a simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A denial of service vulnerability exists in QEMU's scsi. An attacker can exploit this vulnerability to cause a denial of service write across boundaries when the progra...