15 matches found
Linux SCSI Driver Heap Buffer Overflow DoS
The vulnerability of the qla24xxhandleplogidoneevent function in the drivers/scsi/qla2xxx/qlainit.c file of the Linux SCSI device support driver module is related to a buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to cause a service failure...
lpfc_issue_els_plogi Heap Buffer Overflow DoS
Vulnerability of the lpfcissueelsplogi function in the drivers/scsi/lpfc/lpfcels.c module – The Linux SCSI device support driver is vulnerable due to a reliance on the NULL pointer pointer. Exploitation of this vulnerability could allow an attacker to cause a service failure...
DEBIAN-CVE-2022-49534
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Protect memory leak for NPIV ports sending PLOGIRJT There is a potential memory leak in lpfcignoreelscmpl and lpfcelsrspreject that was allocated from NPIV PLOGIRJT lpfcrcvplogi's loginmbox. Check if...
CVE-2022-49535
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI If lpfcissueelsflogi fails and returns non-zero status, the node reference count is decremented to trigger the release of the nodelist structure...
AZL-58352 CVE-2022-49534 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Protect memory leak for NPIV ports sending PLOGIRJT There is a potential memory leak in lpfcignoreelscmpl and lpfcelsrspreject that was allocated from NPIV PLOGIRJT lpfcrcvplogi's loginmbox. Check if...
CVE-2022-49535 scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI If lpfcissueelsflogi fails and returns non-zero status, the node reference count is decremented to trigger the release of the nodelist structure...
CVE-2022-49535
CVE-2022-49535 affects the Linux kernel SCSI lpfc path. The flaw can cause a use-after-free via premature node release when FLOGI/PLOGI handling fails or when non-zero ELS PLOGI status is processed if a dev-loss-evt work is pending. The described root cause is a premature decrementing of the ndlp...
CVE-2022-49535 scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI If lpfcissueelsflogi fails and returns non-zero status, the node reference count is decremented to trigger the release of the nodelist structure...
CVE-2022-49535 scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI If lpfcissueelsflogi fails and returns non-zero status, the node reference count is decremented to trigger the release of the nodelist structure...
CVE-2022-49534 scsi: lpfc: Protect memory leak for NPIV ports sending PLOGI_RJT
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Protect memory leak for NPIV ports sending PLOGIRJT There is a potential memory leak in lpfcignoreelscmpl and lpfcelsrspreject that was allocated from NPIV PLOGIRJT lpfcrcvplogi's loginmbox. Check if...
CVE-2022-49535: Use After Free
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI If lpfcissueelsflogi fails and returns non-zero status, the node reference count is decremented to trigger the release of the nodelist structure...
UBUNTU-CVE-2021-47045
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix null pointer dereference in lpfcprepelsiocb It is possible to call lpfcissueelsplogi passing a did for which no matching ndlp is found. A call is then made to lpfcprepelsiocb with a null pointer to a lpfcnodelist...
GSD-2022-1002838 scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commi...
PT-2022-31101
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description A null pointer dereference issue exists after failing to issue FLOGI and PLOGI. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...
PT-2022-31099
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.18.3 Description The issue is related to a memory leak for NPIV ports sending PLOGI RJT. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...