ROS-20260403-73-0030

A vulnerability in the lpfc/lpfcscsi.c component of the Linux kernel is related to pointer dereferencing errors. Exploitation of the vulnerability allows an attacker to violate data integrity and cause a denial of service...

lpfc_abort_handler Heap Buffer Overflow DoS

Vulnerability of the lpfcaborthandler function in the drivers/scsi/lpfc/lpfcscsi.c module – The Linux SCSI device driver has synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992716)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992716 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input Malformed user...

Linux Distros Unpatched Vulnerability : CVE-2022-50744

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: lpfc: Fix hard lockup when reading the rxmonitor from debugfs During I/O and simultaneous cat of /sys/kernel/debug/lpfc/fnX/rxmonitor, a hard lockup simil...

Linux lpfc/lpfc_scsi.c Component Data Compromise

The vulnerability of the lpfc/lpfcscsi.c component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to compromise data integrity and cause service failures...

kernel: scsi: lpfc: Fix buffer free/clear order in deferred receive path

A use-after-free vulnerability exists in the linux kernel such that the buffer release sequence in the deferred receive path. The code freed the RQ buffer first and only then cleared the context pointer under the lock...

CVE-2023-53754

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix ioremap issues in lpfcsli4pcimemsetup When iftype equals zero and pciresourcestartpdev, PCI64BITBAR4 returns false, drblregsmemmapp is not remapped. This passes a NULL pointer to iounmap, which can trigger a WARN ...

kernel: scsi: lpfc: Fix buffer free/clear order in deferred receive path

A use-after-free vulnerability exists in the linux kernel such that the buffer release sequence in the deferred receive path. The code freed the RQ buffer first and only then cleared the context pointer under the lock...

kernel: scsi: lpfc: Fix buffer free/clear order in deferred receive path

A use-after-free vulnerability exists in the linux kernel such that the buffer release sequence in the deferred receive path. The code freed the RQ buffer first and only then cleared the context pointer under the lock...

ALSA-2025:18281 Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: nfsd: don't ignore the return code of svcprocregister CVE-2025-22026 kernel: firmware: armscpi: Ensure scpiinfo is not assigned if the probe fails CVE-2022-50087 kernel: sunrpc: fix clien...

UBUNTU-CVE-2025-39841

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix buffer free/clear order in deferred receive path Fix a use-after-free window by correcting the buffer release sequence in the deferred receive path. The code freed the RQ buffer first and only then cleared the...

RHEL 7 : kernel-rt (RHSA-2025:15646)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:15646 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...

AZL-58352 CVE-2022-49534 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Protect memory leak for NPIV ports sending PLOGIRJT There is a potential memory leak in lpfcignoreelscmpl and lpfcelsrspreject that was allocated from NPIV PLOGIRJT lpfcrcvplogi's loginmbox. Check if...

SUSE CVE-2024-43816

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Revise lpfcprepembedio routine with proper endian macro usages On big endian architectures, it is possible to run into a memory out of bounds pointer dereference when FCP targets are zoned. In lpfcprepembedio, the...

CVE-2024-43821

Technical details beyond the description of CVE-2024-43821 are not provided in the supplied documents; no explicit affected products/versions/fixes are listed here. Monitor vendor advisories for updates.

PT-2023-33606 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: A potential issue exists in the Linux Kernel, specifically in the lpfc scsi module, where reading the rx monitor from debugfs can cause a hard lockup. The actual impact and attack plausibili...

PT-2022-34989

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.3 Description The issue is related to a null pointer dereference in the abnormal exit path for GFT ID in the lpfc scsi driver. The actual impact and attack plausibility have not yet been proven...

PT-2022-31414

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description A potential issue in the Linux Kernel's lpfc scsi module has been identified, which may lead to a call trace during I/O operations when CMF is enabled. The actual impact and likelihood of...

PT-2022-31659

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description A potential issue in the Linux Kernel's lpfc scsi component has been identified, which may lead to a call trace during I/O operations when CMF is enabled. The actual impact and likelihood of ...

PT-2021-26803

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.5 Description: The issue is related to a NULL pointer dereference in the link down processing of the lpfc scsi driver. The actual impact and attack plausibility have not yet been proven. Recommendations: F...