ROS-20260702-73-0030

The vulnerability of the qla2x00terminaterportio function in the drivers/scsi/qla2xxx/qlaattr.c file of the Linux SCSI device driver module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...

CVE-2026-45955

In the Linux kernel, the following vulnerability has been resolved: md/md-llbitmap: fix percpuref not resurrected on suspend timeout When llbitmapsuspendtimeout times out waiting for percpuref to become zero, it returns -ETIMEDOUT without resurrecting the percpuref. The caller mdllbitmapdaemonfn...

Linux SCSI Device Driver Heap Buffer Overflow DoS

The vulnerability of the qlanvmelsreq function in the drivers/scsi/qla2xxx/qlanvme.c module of the Linux SCSI device driver is related to the pointer dereferencing that occurs during the attempt to start an uninitialized queue, whose functionality has been removed. Exploiting this vulnerability c...

lpfc_rcv_plogi() Function DoS

Vulnerability of the lpfcrcvplogi function in the drivers/scsi/lpfc/lpfcnportdisc.c module – The Linux SCSI device driver has a vulnerability related to improper memory release. Exploiting this vulnerability could allow an attacker to cause service failure...

qla2xxx_process_purls_iocb Heap Buffer Overflow DoS

The vulnerability of the qla2xxxprocesspurlsiocb function in the drivers/scsi/qla2xxx/qlanvme.c driver for Linux SCSI device drivers is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux SCSI DoS

The vulnerability of the SCSI component in the Linux operating system is related to the assignment of the NULL pointer in the lpfcxcvrdatashow function. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux SCSI DoS

The vulnerability of the SCSI component in the Linux operating system is related to errors in the state management function called storestatefield. Exploiting this vulnerability can allow an attacker to cause a service failure...

kernel: SCSI target (LIO) write to any block on ILO backstore

A flaw was found in the Linux kernel’s implementation of the Linux SCSI target host, where an authenticated attacker could write to any block on the exported SCSI device backing store. This flaw allows an authenticated attacker to send LIO block requests to the Linux system to overwrite data on t...