PT-2022-2846 · Linux +9 · Linux Kernel +9

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A kernel information leak flaw was identified in the scsi ioctl function in drivers/scsi/scsi ioctl.c in the Linux kernel. This flaw allows a local attacker with special user privilege...

VMware Workstation SCSI Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of VMware Workstation. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the SCSI...

GSD-2021-1002768 scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select()

scsi: scsidebug: Sanity check block descriptor length in respmodeselect This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.11 by commit...

GSD-2021-1002715 scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select()

scsi: scsidebug: Sanity check block descriptor length in respmodeselect This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit...

GSD-2021-1002714 scsi: scsi_debug: Fix type in min_t to avoid stack OOB

scsi: scsidebug: Fix type in mint to avoid stack OOB This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit...

GSD-2021-1002683 scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select()

scsi: scsidebug: Sanity check block descriptor length in respmodeselect This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.168 by commit...

GSD-2021-1002626 scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select()

scsi: scsidebug: Sanity check block descriptor length in respmodeselect This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.294 by commit...

GSD-2021-1002603 scsi: pm80xx: Do not call scsi_remove_host() in pm8001_alloc()

scsi: pm80xx: Do not call scsiremovehost in pm8001alloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.8 by commit...

GSD-2021-1002533 scsi: mpt3sas: Fix kernel panic during drive powercycle test

scsi: mpt3sas: Fix kernel panic during drive powercycle test This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.6 by commit...

GSD-2021-1002518 scsi: pm80xx: Do not call scsi_remove_host() in pm8001_alloc()

scsi: pm80xx: Do not call scsiremovehost in pm8001alloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.85 by commit...

GSD-2021-1002471 scsi: mpt3sas: Fix kernel panic during drive powercycle test

scsi: mpt3sas: Fix kernel panic during drive powercycle test This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.83 by commit...

GSD-2021-1002436 scsi: mpt3sas: Fix kernel panic during drive powercycle test

scsi: mpt3sas: Fix kernel panic during drive powercycle test This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.163 by commit...

GSD-2021-1002411 scsi: mpt3sas: Fix kernel panic during drive powercycle test

scsi: mpt3sas: Fix kernel panic during drive powercycle test This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.219 by commit...

GSD-2021-1002389 scsi: mpt3sas: Fix kernel panic during drive powercycle test

scsi: mpt3sas: Fix kernel panic during drive powercycle test This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.257 by commit...

GSD-2021-1002372 scsi: mpt3sas: Fix kernel panic during drive powercycle test

scsi: mpt3sas: Fix kernel panic during drive powercycle test This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.292 by commit...

GSD-2021-1002357 scsi: mpt3sas: Fix kernel panic during drive powercycle test

scsi: mpt3sas: Fix kernel panic during drive powercycle test This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.294 by commit...

Denial Of Service (DoS)

qemu is vulnerable to denial of service. The vulnerability exists due to a NULL pointer dereference flaw that was found in the megasas-gen2 SCSI host bus adapter emulation of QEMU...

GSD-2021-1002349 scsi: pm80xx: Fix memory leak during rmmod

scsi: pm80xx: Fix memory leak during rmmod This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

UVI-2021-1002349 scsi: pm80xx: Fix memory leak during rmmod

scsi: pm80xx: Fix memory leak during rmmod This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

UVI-2021-1002348 scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()

scsi: lpfc: Fix listadd corruption in lpfcdraintxq This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...