Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: scsi: Reverted the behavior from “scsi: core: Do not increase scsidevice’s iorequestcnt if dispatch failed”. The use of “atomicinc&cmd-device-iorequestcnt” in scsiqueuerq could cause kernel panic, as cmd-device might be freed aft...

EUVD-2023-59999

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: qmiencdec: Restrict string length in decode The QMI TLV value for strings in a lot of qmi element info structures account for null terminated strings with MAXLEN + 1. If a string is actually MAXLEN + 1 length, this wil...

Linux Distros Unpatched Vulnerability : CVE-2023-53609

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: Revert scsi: core: Do not increase scsidevice's iorequestcnt if dispatch failed The atomicinc&cmd-device-iorequestcnt in scsiqueuerq would cause kernel...

CVE-2023-53609

CVE-2023-53609 affects the Linux kernel in the SCSI subsystem. The vulnerability stems from a change where scsi_queue_rq() could execute atomic_inc(&cmd->device->iorequest_cnt) after scsi_dispatch_cmd(), risking a kernel panic if cmd->device was freed. The issue has been addressed by rev...

CVE-2023-53609 scsi: Revert "scsi: core: Do not increase scsi_device's iorequest_cnt if dispatch failed"

In the Linux kernel, the following vulnerability has been resolved: scsi: Revert "scsi: core: Do not increase scsidevice's iorequestcnt if dispatch failed" The "atomicinc&cmd-device-iorequestcnt" in scsiqueuerq would cause kernel panic because cmd-device may be freed after returning from...