PT-2025-53945

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the lpfc create port function within the Linux kernel's SCSI subsystem. The issue was introduced by commit 5e633302ace1, which added support for VMID in mailbox...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992239)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992239 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: scsidhalua: Fix memleak for 'qdata' in aluaactivate If aluartpgqueue failed from...

PT-2025-53936

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-rc1-205202-gf26f8f761e83 218 Description A flaw exists in the SCSI subsystem of the Linux kernel, specifically within the pm8001 driver. The issue involves incorrect handling of the running req counter when...

PT-2025-53958

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a use-after-free issue within the snic tgt create function in the SCSI subsystem. Specifically, if device add fails during the creation of a target, the target’...

PT-2025-53968

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc1-00190-g39508d23b672 Description The Linux kernel contains an issue in the ipr init function within the SCSI subsystem. Specifically, ipr init does not call unregister reboot notifier when pci register...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992171)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992171 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix possible memory leak if deviceadd fails If deviceadd returns error, the name...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992290)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992290 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input Malformed user...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992624)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992624 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: core: Remove the /proc/scsi/$procname directory earlier Remove the /proc/scsi/$procname...

PT-2025-54063

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s scsi/mpi3mr module related to the initialization of the evtack cmds array within the mrioc structure. Specifically, commit c1af985d27da introduced thi...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992531)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992531 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Handle enclosure with just a primary component gracefully This reverts commit...

Unity Linux 20.1060e Security Update: kernel (UTSA-2025-992680)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992680 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix command flush on cable pull System crash due to command failed to flush back t...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992259)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992259 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Perform lockless command completion in abort path While adding and removing the...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992185)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992185 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: libsas: Fix use-after-free bug in smpexecutetasksg When executing SMP task failed, the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992520)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992520 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: snic: Fix possible memory leak if deviceadd fails If deviceadd returns error, the name...

Linux Distros Unpatched Vulnerability : CVE-2022-50727

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: efct: Fix possible memleak in efctdeviceinit In efctdeviceinit, when efctscsiregfctransport fails, efctscsitgtdriverexit is not called to release memory f...

CVE-2023-54011

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix an issue found by KASAN Write only correct size 32 instead of 64 bytes...

CVE-2023-54014

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Check valid rport returned by fcbsgtorport Klocwork reported warning of rport maybe NULL and will be dereferenced. rport returned by call to fcbsgtorport could be NULL and dereferenced. Check valid rport returned b...

SUSE CVE-2022-50727

In the Linux kernel, the following vulnerability has been resolved: scsi: efct: Fix possible memleak in efctdeviceinit In efctdeviceinit, when efctscsiregfctransport fails, efctscsitgtdriverexit is not called to release memory for efctscsitgtdriverinit and causes memleak: unreferenced object...

SUSE CVE-2022-50768

In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Correct device removal for multi-actuator devices Correct device count for multi-actuator drives which can cause kernel panics...

SUSE CVE-2023-54011

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix an issue found by KASAN Write only correct size 32 instead of 64 bytes...