Поиск уязвимостей

In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix WRITE_SAME No Data Buffer crash In newer version of the SBC specs, we have a NDOB bit that indicates there is no data buffer that gets written out. If this bit is set using commands like "sg_write_same --ndob" we will crash in target_core_iblock/file's execute_write_same handlers when we go to access the se_cmd->t_data_sg because its NULL. This patch adds a check for the NDOB bit in the common WRITE SAME code because we don't support it. And, it adds a check for zero SG elements in each handler in case the initiator tries to send a normal WRITE SAME with no data buffer.

In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix WRITE_SAME No Data Buffer crash In newer version of the SBC specs, we have a NDOB bit that indicates there is no data buffer that gets written out. If this bit is set using commands like "sg_write_same --ndob" we will crash in target_core_iblock/file's execute_write_same handlers when we go to access the se_cmd->t_data_sg because its NULL. This patch adds a check for the NDOB bit in the common WRITE SAME code because we don't support it. And, it adds a check for zero SG elements in each handler in case the initiator tries to send a normal WRITE SAME with no data buffer.

In the Linux kernel, the following vulnerability has been resolved: s ...

In newer version of the SBC specs, we have a NDOB bit that indicates there is no data buffer that gets written out. If this bit is set using commands like "sg_write_same --ndob" we will crash in target_core_iblock/file's execute_write_same handlers when we go to access the se_cmd->t_data_sg because its NULL. CVSS 3.1 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).

Уязвимость функции write_same() драйвера SCSI ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

ELSA-2022-9788: Unbreakable Enterprise kernel-container security update (IMPORTANT)

ELSA-2022-9787: Unbreakable Enterprise kernel security update (IMPORTANT)

ELSA-2022-9829: Unbreakable Enterprise kernel-container security update (IMPORTANT)

ELSA-2022-9828: Unbreakable Enterprise kernel security update (IMPORTANT)

ELSA-2022-9830: Unbreakable Enterprise kernel-container security update (IMPORTANT)

ELSA-2022-9827: Unbreakable Enterprise kernel security update (IMPORTANT)

ELSA-2022-9761: Unbreakable Enterprise kernel security update (IMPORTANT)

ALT-PU-2025-16616: package `kernel-image-rt` update to version 5.10.238-alt1.rt132

ALT-PU-2025-16604: package `kernel-image-std-def` update to version 5.10.238-alt1

Security update for the Linux Kernel

ALT-PU-2022-2523: package `kernel-image-un-def` update to version 5.19.5-alt1

ALT-PU-2022-2497: package `kernel-image-mp` update to version 5.19.4-alt1

ALT-PU-2023-1741: package `kernel-image-un-def` update to version 6.1.26-alt1

ALT-PU-2023-1684: package `kernel-image-std-def` update to version 6.1.26-alt1

ALT-PU-2022-2919: package `kernel-image-rpi-un` update to version 6.0.2-alt1