GSD-2022-1002836 scsi: lpfc: Protect memory leak for NPIV ports sending PLOGI_RJT

scsi: lpfc: Protect memory leak for NPIV ports sending PLOGIRJT This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002794 scsi: lpfc: Inhibit aborts if external loopback plug is inserted

scsi: lpfc: Inhibit aborts if external loopback plug is inserted This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002577 scsi: lpfc: Address NULL pointer dereference after starget_to_rport()

scsi: lpfc: Address NULL pointer dereference after stargettorport This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

kernel: scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()

A vulnerability was found in the Linux kernel while parsing the txq list in the lpfcdraintxq function. Due to improper handling of a local fail message string which is set when a job fails and is never unset for subsequent jobs, this issue can lead to list corruption as jobs may be added to both...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

ALSA-2022:1550 Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: use-after-free in RDMA listen CVE-2021-4028 kernel: heap out of bounds write in nfdupnetdev.c CVE-2022-25636 For more details about the security issues, including the impact, a CVSS score...

Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: use-after-free in RDMA listen CVE-2021-4028 kernel: heap out of bounds write in nfdupnetdev.c CVE-2022-25636 For more details about the security issues, including the impact, a CVSS score...

kernel security and bug fix update

An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

RLSA-2022:1550 Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: use-after-free in RDMA listen CVE-2021-4028 kernel: heap out of bounds write in nfdupnetdev.c CVE-2022-25636 For more details about the security issues, including the impact, a CVSS score...

GSD-2022-1000972 scsi: lpfc: Fix unload hang after back to back PCI EEH faults

scsi: lpfc: Fix unload hang after back to back PCI EEH faults This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.4 by commit...

PT-2025-8468

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference issue has been identified in the Linux kernel, specifically in the lpfc driver. This issue occurs when the lpfc issue els flogi function fails and returns a...

PT-2025-8467

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential memory leak was identified in the Linux kernel, specifically in the lpfc driver. The issue occurs when handling NPIV PLOGI RJT responses, where memory allocated for service...

GSD-2021-1002348 scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()

scsi: lpfc: Fix listadd corruption in lpfcdraintxq This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

UVI-2021-1002348 scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()

scsi: lpfc: Fix listadd corruption in lpfcdraintxq This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

GSD-2021-1002334 scsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine

scsi: lpfc: Fix use-after-free in lpfcunregrpi routine This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

UVI-2021-1002334 scsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine

scsi: lpfc: Fix use-after-free in lpfcunregrpi routine This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

GSD-2021-1002333 scsi: lpfc: Fix link down processing to address NULL pointer dereference

scsi: lpfc: Fix link down processing to address NULL pointer dereference This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

UVI-2021-1002333 scsi: lpfc: Fix link down processing to address NULL pointer dereference

scsi: lpfc: Fix link down processing to address NULL pointer dereference This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

GSD-2021-1002301 scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()

scsi: lpfc: Fix listadd corruption in lpfcdraintxq This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.82 by commit...

UVI-2021-1002301 scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()

scsi: lpfc: Fix listadd corruption in lpfcdraintxq This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.82 by commit...