GSD-2023-1000969 scsi: ufs: Reduce the START STOP UNIT timeout

scsi: ufs: Reduce the START STOP UNIT timeout This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000967 scsi: elx: libefc: Fix second parameter type in state callbacks

scsi: elx: libefc: Fix second parameter type in state callbacks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000700 scsi: scsi_debug: Fix a warning in resp_write_scat()

scsi: scsidebug: Fix a warning in respwritescat This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000692 scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()

scsi: mpt3sas: Fix possible resource leaks in mpt3sastransportportadd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000690 scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device()

scsi: hpsa: Fix possible memory leak in hpsaaddsasdevice This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000689 scsi: fcoe: Fix possible name leak when device_register() fails

scsi: fcoe: Fix possible name leak when deviceregister fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000688 scsi: scsi_debug: Fix possible name leak in sdebug_add_host_helper()

scsi: scsidebug: Fix possible name leak in sdebugaddhosthelper This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000687 scsi: ipr: Fix WARNING in ipr_init()

scsi: ipr: Fix WARNING in iprinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit 8c739021b2022fbc40f71d3fa2e9162beef0c84a, it...

GSD-2023-1000686 scsi: efct: Fix possible memleak in efct_device_init()

scsi: efct: Fix possible memleak in efctdeviceinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000685 scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails

scsi: fcoe: Fix transport not deattached when fcoeifinit fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000684 scsi: snic: Fix possible UAF in snic_tgt_create()

scsi: snic: Fix possible UAF in snictgtcreate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000532 scsi: qla2xxx: Fix crash when I/O abort times out

scsi: qla2xxx: Fix crash when I/O abort times out This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000529 scsi: lpfc: Fix hard lockup when reading the rx_monitor from debugfs

scsi: lpfc: Fix hard lockup when reading the rxmonitor from debugfs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000527 scsi: ufs: Reduce the START STOP UNIT timeout

scsi: ufs: Reduce the START STOP UNIT timeout This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000520 scsi: smartpqi: Correct device removal for multi-actuator devices

scsi: smartpqi: Correct device removal for multi-actuator devices This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000516 scsi: target: iscsi: Fix a race condition between login_work and the login thread

scsi: target: iscsi: Fix a race condition between loginwork and the login thread This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by comm...

PT-2023-34486 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 2.6.39 through 5.10.162 Description: The issue is related to the SCSI FCoE transport not being detached when the fcoe if init function fails. This problem was introduced in version 2.6.39 and fixed in version 5.10.163. T...

PT-2023-34047 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: A potential issue exists in the Linux Kernel, specifically in the lpfc scsi module, where reading the rx monitor from debugfs can cause a hard lockup. The actual impact and attack...

PT-2023-33606 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: A potential issue exists in the Linux Kernel, specifically in the lpfc scsi module, where reading the rx monitor from debugfs can cause a hard lockup. The actual impact and attack plausibili...

kernel security and bug fix update

4.18.0-425.10.1.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...