Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: scsi: scsi.debug: A sanity check was performed to ensure that the block descriptor length in respmodeselect was valid. BUG: KASAN: A use-after-free condition occurred in respmodeselect+0xa4c/0xb40, located in...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: scsi: scsidebug: Do not call kcalloc if size argument is zero. If the size argument to kcalloc is zero, it returns ZEROSIZEPTR. Therefore, for the subsequent NULL pointer check to work on the returned pointer, kcalloc must not...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: core: The /proc/scsi/$procname directory was removed earlier. Removing this directory helps to fix a race condition between unloading and reloading kernel modules. This fixes a bug introduced in 2009 by commit 77c019768f06...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007603)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007603 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Fix out-of-bound read in respreadcap16 The following warning was observed runnin...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992991)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992991 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: core: Remove the /proc/scsi/$procname directory earlier Remove the /proc/scsi/$procname...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992624)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992624 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: core: Remove the /proc/scsi/$procname directory earlier Remove the /proc/scsi/$procname...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-990744)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990744 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: core: Remove the /proc/scsi/$procname directory earlier Remove the /proc/scsi/$procname...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988859)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988859 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Fix out-of-bound read in respreporttgtpgs The following issue was observed runni...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989953)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989953 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Don't call kcalloc if size arg is zero If the size arg to kcalloc is zero, it...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989257)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989257 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Fix type in mint to avoid stack OOB Change mint to use type u32 instead of type...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989262)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989262 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Sanity check block descriptor length in respmodeselect In respmodeselect sanity...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989584)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989584 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Fix out-of-bound read in respreadcap16 The following warning was observed runnin...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987024)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987024 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Fix out-of-bound read in respreporttgtpgs The following issue was observed runni...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986576)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986576 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Sanity check block descriptor length in respmodeselect In respmodeselect sanity...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986528)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986528 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Sanity check block descriptor length in respmodeselect In respmodeselect sanity...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987340)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987340 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Sanity check block descriptor length in respmodeselect In respmodeselect sanity...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986947)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986947 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Fix out-of-bound read in respreadcap16 The following warning was observed runnin...

CLSA-2025-1748366748 kernel: Fix of 12 CVEs

ext4: fix OOB read when checking dotdot dir CVE-2025-37785 - iscsiibft: Fix UBSAN shift-out-of-bounds warning in ibftattrshownic CVE-2025-21993 - media: uvcvideo: Fix double free in error path CVE-2024-57980 - jffs2: Prevent rtime decompress memory corruption CVE-2024-57850 - wifi: iwlegacy:...

CLSA-2025-1748365686 kernel: Fix of 12 CVEs

ext4: fix OOB read when checking dotdot dir CVE-2025-37785 - iscsiibft: Fix UBSAN shift-out-of-bounds warning in ibftattrshownic CVE-2025-21993 - media: uvcvideo: Fix double free in error path CVE-2024-57980 - jffs2: Prevent rtime decompress memory corruption CVE-2024-57850 - wifi: iwlegacy:...

SUSE CVE-2023-53140

In the Linux kernel, the following vulnerability has been resolved: scsi: core: Remove the /proc/scsi/$procname directory earlier Remove the /proc/scsi/$procname directory earlier to fix a race condition between unloading and reloading kernel modules. This fixes a bug introduced in 2009 by commit...