In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() The function lio_target_nacl_info_show() uses sprintf() in a loop to print details for every iSCSI connection in a session without checking for the buffer length. With enough iSCSI connections it's possible to overflow the buffer provided by configfs and corrupt the memory. This patch replaces sprintf() with sysfs_emit_at() that checks for buffer boundries.

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() The function lio_target_nacl_info_show() uses sprintf() in a loop to print details for every iSCSI connection in a session without checking for the buffer length. With enough iSCSI connections it's possible to overflow the buffer provided by configfs and corrupt the memory. This patch replaces sprintf() with sysfs_emit_at() that checks for buffer boundries.

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() The function lio_target_nacl_info_show() uses sprintf() in a loop to print details for every iSCSI connection in a session without checking for the buffer length. With enough iSCSI connections it's possible to overflow the buffer provided by configfs and corrupt the memory. This patch replaces sprintf() with sysfs_emit_at() that checks for buffer boundries.

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() The function lio_target_nacl_info_show() uses sprintf() in a loop to print details for every iSCSI connection in a session without checking for the buffer length. With enough iSCSI connections it's possible to overflow the buffer provided by configfs and corrupt the memory. This patch replaces sprintf() with sysfs_emit_at() that checks for buffer boundries.

In the Linux kernel, the following vulnerability has been resolved: s ...

Security update for the Linux Kernel

Уязвимость функции lio_target_nacl_info_show() модуля drivers/target/iscsi/iscsi_target_configfs.c драйвера TCM ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 15 SP7)

Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP6)

Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 15 SP7)

Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 15 SP7)

Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 15 SP7)

Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 15 SP6)

Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 15 SP7)

Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 15 SP7)

Security update for the Linux Kernel (Live Patch 45 for SUSE Linux Enterprise 15 SP4)

Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 15 SP7)

Security update for the Linux Kernel (Live Patch 73 for SUSE Linux Enterprise 12 SP5)

Security update for the Linux Kernel (Live Patch 31 for SUSE Linux Enterprise 15 SP5)

Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 15 SP7)