CVE-2025-53768

CVE-2025-53768 corresponds to an Xbox-related vulnerability in the IStorageService component, described as a use-after-free that enables an authorized attacker to elevate privileges locally. The connected NCSC advisory references this CVE as an Xbox issue with impact class “Obtaining Increased Ri...

EUVD-2024-3181

Malicious code in bioql PyPI...

EUVD-2024-3170

Malicious code in bioql PyPI...

CVE-2022-50422

CVE-2022-50422 affects the Linux kernel’s SCSI LIBSAS path. When SMP task execution fails, smp_execute_task_sg() calls del_timer() to remove slow_task->timer, but if sas_task_internal_timedout() is running, the timer isn’t stopped, causing a use-after-free of task->slow_task. The fix is to ...

hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur

...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: checksec, configmap-reload-fips, linkerd2-proxy-init, mongodb-kubernetes-operator, nvidia-nsight-compute-12.8, secrets-store-csi-driver-provider-aws-fips, docker-credential-ecr-login, sftpgo-plugin-geoipfilter, stakater-reloader, nemo, karma-fips, knative-eventing,...

CVE-2023-53414 scsi: snic: Fix memory leak with using debugfs_lookup()

In the Linux kernel, the following vulnerability has been resolved: scsi: snic: Fix memory leak with using debugfslookup When calling debugfslookup the result must have dput called on it, otherwise the memory will leak over time. To make things simpler, just call debugfslookupandremove instead...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a potentially erroneous pointer dereference in scsi/qla4xxx...

scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set

...

scsi: ufs: pltfrm: Dellocate HBA during ufshcd_pltfrm_remove()

...

CVE-2025-5187 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-hostpath, yunikorn-k8shim, vcluster, docker-machine-driver-harvester, k8ssandra-client, nodetaint, ip-masq-agent, kubernetes, kubernetes-dns-node-cache, rancher-webhook, argo-rollouts, kapp, kubernetes-csi-driver-nfs, rancher-system-agent,...

SUSE CVE-2025-38332

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Use memcpy for BIOS version The strlcat with FORTIFY support is triggering a panic because it thinks the target buffer will overflow although the correct target buffer size is passed in. Anyway, instead of memset with...

UBUNTU-CVE-2025-4088

A security vulnerability in Thunderbird allowed malicious sites to use redirects to send credentialed requests to arbitrary endpoints on any site that had invoked the Storage Access API. This enabled potential Cross-Site Request Forgery attacks across origins. This vulnerability was fixed in...

Microsoft Windows Runtime Broker ClipboardBroker Privilege Escalation

The Runtime Broker’s Clipboard Broker allows any low IL/AppContainer such as Edge or IE EPM to get access to an OOP IStorage object through the ClipboardBroker leading to a sandbox escape...

Buffalo LS520D 信息泄露漏洞

The Buffalo LS520D is a network attached storage device from Buffalo Japan that efficiently handles multi-CPU access to store and share data. A security vulnerability exists in the Buffalo LS520D version 4.53 that originates from an unauthenticated user being able to access the NAS web UI and rea...

SUSE CVE-2022-49332

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Address NULL pointer dereference after stargettorport Calls to stargettorport may return NULL. Add check for NULL rport before dereference...

DEBIAN-CVE-2022-49160

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix crash during module load unload test During purex packet handling the driver was incorrectly freeing a pre-allocated structure. Fix this by skipping that entry. System crashed with the following stack during a...

The vulnerabilities of vSphere CPI (Cloud Provider Interface) and vSphere CSI (Container Storage Interface), which are software platforms for deploying containers in a production environment, allow attackers to exploit them to disclose sensitive information.

The vulnerability of vSphere CPI Cloud Provider Interface and vSphere CSI Container Storage Interface, two components of the software platform for container deployment in a production environment, is related to insufficient protection of registration data. Exploiting this vulnerability can allow ...

The vulnerability of the Container Storage Interface (CSI) component in the Nomad application orchestrator allows a attacker to influence the integrity of the protected information.

The vulnerability of the Container Storage Interface CSI component in the Nomad application orchestrator is related to improper authentication. Exploiting this vulnerability allows an attacker to influence the integrity of the protected information...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a post-release reuse issue during uninstallation in the scsi:qla2xxx module...