Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: scsi: scsi.debug: A sanity check was performed to ensure that the block descriptor length in respmodeselect was valid. BUG: KASAN: A use-after-free condition occurred in respmodeselect+0xa4c/0xb40, located in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989262)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989262 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Sanity check block descriptor length in respmodeselect In respmodeselect sanity...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986576)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986576 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Sanity check block descriptor length in respmodeselect In respmodeselect sanity...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986528)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986528 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Sanity check block descriptor length in respmodeselect In respmodeselect sanity...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987340)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987340 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Sanity check block descriptor length in respmodeselect In respmodeselect sanity...

The vulnerability of the scsidebug component in the Linux operating system’s kernel allows a hacker to gain elevated privileges within the system.

The vulnerability of the scsidebug component in the Linux operating system’s kernel is related to errors that occur during the respmodeselect function after it is freed. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the system...

SUSE CVE-2021-47576

In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Sanity check block descriptor length in respmodeselect In respmodeselect sanity check the block descriptor len to avoid UAF. BUG: KASAN: use-after-free in respmodeselect+0xa4c/0xb40 drivers/scsi/scsidebug.c:2509...

DEBIAN-CVE-2021-47576

In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Sanity check block descriptor length in respmodeselect In respmodeselect sanity check the block descriptor len to avoid UAF. BUG: KASAN: use-after-free in respmodeselect+0xa4c/0xb40 drivers/scsi/scsidebug.c:2509...

UBUNTU-CVE-2021-47576

In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Sanity check block descriptor length in respmodeselect In respmodeselect sanity check the block descriptor len to avoid UAF. BUG: KASAN: use-after-free in respmodeselect+0xa4c/0xb40 drivers/scsi/scsidebug.c:2509...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from respmodeselect in scsi scsidebug that does not perform an integrity check on block descriptor length...

PT-2021-27108

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.259 Description A sanity check for block descriptor length in the resp mode select function is missing. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-27236

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.11 Description A sanity check for block descriptor length in the resp mode select function is missing. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-27183

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.88 Description A sanity check for block descriptor length in the resp mode select function is missing. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-27129

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.222 Description A sanity check for block descriptor length in the resp mode select function is missing. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-27094

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.294 Description The issue is related to a sanity check in the resp mode select function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-27151

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.168 Description A sanity check has been added to the resp mode select function to verify the block descriptor length. The actual impact and attack plausibility of this issue have not yet been proven...

PT-2021-8228

Name of the Vulnerable Software and Affected Versions Linux kernel version 5.15.0-01d0625 Description The vulnerability is related to a use-after-free issue in the resp mode select function of the scsi debug component. This issue can be exploited to potentially elevate privileges in the system. T...