148 matches found
CVE-2025-40118 scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod
In the Linux kernel, the following vulnerability has been resolved: scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod Since commit f7b705c238d1 "scsi: pm80xx: Set phyattached to zero when device is gone" UBSAN reports: UBSAN: array-index-out-of-bounds in drivers/scsi/pm8001/pm8001sas.c:786:...
CVE-2025-40118 scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod
In the Linux kernel, the following vulnerability has been resolved: scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod Since commit f7b705c238d1 "scsi: pm80xx: Set phyattached to zero when device is gone" UBSAN reports: UBSAN: array-index-out-of-bounds in drivers/scsi/pm8001/pm8001sas.c:786:...
CVE-2025-40118
CVE-2025-40118 is a Linux kernel vulnerability in the SCSI pm80xx driver. The description states an array-index-out-of-bounds on rmmod for devices behind an expander, caused by using attached_phy indices that can exceed the pm8001_ha->chip->n_phy array. The issue is fixed by a commit that z...
Linux Distros Unpatched Vulnerability : CVE-2025-40118
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod Since commit f7b705c238d1 scsi: pm80xx: Set phyattached to zero when device is gone UBSAN reports: UBSAN...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990578)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990578 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix abort all task initialization In pm80xxsendabortall, the nelem field of the ccb...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989519)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989519 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: pm80xx: Do not call scsiremovehost in pm8001alloc Calling scsiremovehost before scsiaddhost...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988656)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988656 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix memory leak in pm8001chipfwflashupdatereq In pm8001chipfwflashupdatebuild, if...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989735)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989735 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix abort all task initialization In pm80xxsendabortall, the nelem field of the ccb...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990055)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990055 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix use-after-free for aborted SSP/STP sastask Currently a use-after-free may occur...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989928)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989928 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix abort all task initialization In pm80xxsendabortall, the nelem field of the ccb...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989638)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989638 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix tag leaks on error In pm8001chipsetdevstatereq, pm8001chipfwflashupdatereq,...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988710)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988710 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix use-after-free for aborted TMF sastask Currently a use-after-free may occur if ...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989673)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989673 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix task leak in pm8001sendabortall In pm8001sendabortall, make sure to free the...
EUVD-2022-55009
In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix abort all task initialization In pm80xxsendabortall, the nelem field of the ccb used is not initialized to 0. This missing initialization sometimes lead to the task completion path seeing the ccb with a non-zero...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987589)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987589 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix tag leaks on error In pm8001chipsetdevstatereq, pm8001chipfwflashupdatereq,...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986856)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986856 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix memory leak in pm8001chipfwflashupdatereq In pm8001chipfwflashupdatebuild, if...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986948)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986948 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix use-after-free for aborted TMF sastask Currently a use-after-free may occur if ...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987346)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987346 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix use-after-free for aborted SSP/STP sastask Currently a use-after-free may occur...