Поиск уязвимостей
Количество 26
Количество 26
CVE-2023-52515
In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: Do not call scsi_done() from srp_abort() After scmd_eh_abort_handler() has called the SCSI LLD eh_abort_handler callback, it performs one of the following actions: * Call scsi_queue_insert(). * Call scsi_finish_command(). * Call scsi_eh_scmd_add(). Hence, SCSI abort handlers must not call scsi_done(). Otherwise all the above actions would trigger a use-after-free. Hence remove the scsi_done() call from srp_abort(). Keep the srp_free_req() call before returning SUCCESS because we may not see the command again if SUCCESS is returned.
CVE-2023-52515
In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: Do not call scsi_done() from srp_abort() After scmd_eh_abort_handler() has called the SCSI LLD eh_abort_handler callback, it performs one of the following actions: * Call scsi_queue_insert(). * Call scsi_finish_command(). * Call scsi_eh_scmd_add(). Hence, SCSI abort handlers must not call scsi_done(). Otherwise all the above actions would trigger a use-after-free. Hence remove the scsi_done() call from srp_abort(). Keep the srp_free_req() call before returning SUCCESS because we may not see the command again if SUCCESS is returned.
CVE-2023-52515
In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: Do not call scsi_done() from srp_abort() After scmd_eh_abort_handler() has called the SCSI LLD eh_abort_handler callback, it performs one of the following actions: * Call scsi_queue_insert(). * Call scsi_finish_command(). * Call scsi_eh_scmd_add(). Hence, SCSI abort handlers must not call scsi_done(). Otherwise all the above actions would trigger a use-after-free. Hence remove the scsi_done() call from srp_abort(). Keep the srp_free_req() call before returning SUCCESS because we may not see the command again if SUCCESS is returned.
CVE-2023-52515
In the Linux kernel, the following vulnerability has been resolved: R ...
GHSA-9mhh-v2w9-x3xj
In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: Do not call scsi_done() from srp_abort() After scmd_eh_abort_handler() has called the SCSI LLD eh_abort_handler callback, it performs one of the following actions: * Call scsi_queue_insert(). * Call scsi_finish_command(). * Call scsi_eh_scmd_add(). Hence, SCSI abort handlers must not call scsi_done(). Otherwise all the above actions would trigger a use-after-free. Hence remove the scsi_done() call from srp_abort(). Keep the srp_free_req() call before returning SUCCESS because we may not see the command again if SUCCESS is returned.
BDU:2024-07819
Уязвимость компонента RDMA/srp ядра операционной системы Linux, позволяющая нарушителю повысить свои привилегии
ALT-PU-2023-6736
ALT-PU-2023-6736: package `kernel-image-std-def` update to version 5.10.199-alt2
ALT-PU-2023-8820
ALT-PU-2023-8820: package `kernel-image-std-def` update to version 6.1.57-alt1
ALT-PU-2023-8889
ALT-PU-2023-8889: package `kernel-image-un-def` update to version 6.5.7-alt1
ROS-20241003-01
Множественные уязвимости kernel-lt
ALT-PU-2023-8593
ALT-PU-2023-8593: package `kernel-image-rt` update to version 5.10.199-alt1.rt97
SUSE-SU-2024:1321-1
Security update for the Linux Kernel
ALT-PU-2023-8574
ALT-PU-2023-8574: package `kernel-image-un-def` update to version 6.1.57-alt1
SUSE-SU-2024:1466-1
Security update for the Linux Kernel
SUSE-SU-2024:1322-1
Security update for the Linux Kernel
SUSE-SU-2024:1480-1
Security update for the Linux Kernel
ALT-PU-2023-8727
ALT-PU-2023-8727: package `kernel-image-rt` update to version 6.1.59-alt1.rt16
ALT-PU-2023-6505
ALT-PU-2023-6505: package `kernel-image-mp` update to version 6.5.8-alt1
SUSE-SU-2024:1490-1
Security update for the Linux Kernel
SUSE-SU-2024:1646-1
Security update for the Linux Kernel
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-52515 In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: Do not call scsi_done() from srp_abort() After scmd_eh_abort_handler() has called the SCSI LLD eh_abort_handler callback, it performs one of the following actions: * Call scsi_queue_insert(). * Call scsi_finish_command(). * Call scsi_eh_scmd_add(). Hence, SCSI abort handlers must not call scsi_done(). Otherwise all the above actions would trigger a use-after-free. Hence remove the scsi_done() call from srp_abort(). Keep the srp_free_req() call before returning SUCCESS because we may not see the command again if SUCCESS is returned. | CVSS3: 7.8 | 1% Низкий | больше 2 лет назад |
 | CVE-2023-52515 In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: Do not call scsi_done() from srp_abort() After scmd_eh_abort_handler() has called the SCSI LLD eh_abort_handler callback, it performs one of the following actions: * Call scsi_queue_insert(). * Call scsi_finish_command(). * Call scsi_eh_scmd_add(). Hence, SCSI abort handlers must not call scsi_done(). Otherwise all the above actions would trigger a use-after-free. Hence remove the scsi_done() call from srp_abort(). Keep the srp_free_req() call before returning SUCCESS because we may not see the command again if SUCCESS is returned. | CVSS3: 6 | 1% Низкий | больше 2 лет назад |
 | CVE-2023-52515 In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: Do not call scsi_done() from srp_abort() After scmd_eh_abort_handler() has called the SCSI LLD eh_abort_handler callback, it performs one of the following actions: * Call scsi_queue_insert(). * Call scsi_finish_command(). * Call scsi_eh_scmd_add(). Hence, SCSI abort handlers must not call scsi_done(). Otherwise all the above actions would trigger a use-after-free. Hence remove the scsi_done() call from srp_abort(). Keep the srp_free_req() call before returning SUCCESS because we may not see the command again if SUCCESS is returned. | CVSS3: 7.8 | 1% Низкий | больше 2 лет назад |
| CVE-2023-52515 In the Linux kernel, the following vulnerability has been resolved: R ... | CVSS3: 7.8 | 1% Низкий | больше 2 лет назад |
| GHSA-9mhh-v2w9-x3xj In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: Do not call scsi_done() from srp_abort() After scmd_eh_abort_handler() has called the SCSI LLD eh_abort_handler callback, it performs one of the following actions: * Call scsi_queue_insert(). * Call scsi_finish_command(). * Call scsi_eh_scmd_add(). Hence, SCSI abort handlers must not call scsi_done(). Otherwise all the above actions would trigger a use-after-free. Hence remove the scsi_done() call from srp_abort(). Keep the srp_free_req() call before returning SUCCESS because we may not see the command again if SUCCESS is returned. | CVSS3: 7.8 | 1% Низкий | больше 2 лет назад |
 | BDU:2024-07819 Уязвимость компонента RDMA/srp ядра операционной системы Linux, позволяющая нарушителю повысить свои привилегии | CVSS3: 8.8 | 1% Низкий | около 3 лет назад |
| ALT-PU-2023-6736 ALT-PU-2023-6736: package `kernel-image-std-def` update to version 5.10.199-alt2 | CVSS3: 9.8 | около 3 лет назад | |
| ALT-PU-2023-8820 ALT-PU-2023-8820: package `kernel-image-std-def` update to version 6.1.57-alt1 | CVSS3: 8.8 | около 3 лет назад | |
| ALT-PU-2023-8889 ALT-PU-2023-8889: package `kernel-image-un-def` update to version 6.5.7-alt1 | CVSS3: 8.8 | около 3 лет назад | |
 | ROS-20241003-01 Множественные уязвимости kernel-lt | CVSS3: 8.8 | около 2 лет назад | |
| ALT-PU-2023-8593 ALT-PU-2023-8593: package `kernel-image-rt` update to version 5.10.199-alt1.rt97 | CVSS3: 9.8 | почти 3 года назад | |
 | SUSE-SU-2024:1321-1 Security update for the Linux Kernel | больше 2 лет назад | ||
| ALT-PU-2023-8574 ALT-PU-2023-8574: package `kernel-image-un-def` update to version 6.1.57-alt1 | CVSS3: 9.1 | около 3 лет назад | |
| SUSE-SU-2024:1466-1 Security update for the Linux Kernel | больше 2 лет назад | ||
| SUSE-SU-2024:1322-1 Security update for the Linux Kernel | больше 2 лет назад | ||
| SUSE-SU-2024:1480-1 Security update for the Linux Kernel | больше 2 лет назад | ||
| ALT-PU-2023-8727 ALT-PU-2023-8727: package `kernel-image-rt` update to version 6.1.59-alt1.rt16 | CVSS3: 9.1 | около 3 лет назад | |
| ALT-PU-2023-6505 ALT-PU-2023-6505: package `kernel-image-mp` update to version 6.5.8-alt1 | CVSS3: 9.1 | около 3 лет назад | |
| SUSE-SU-2024:1490-1 Security update for the Linux Kernel | больше 2 лет назад | ||
| SUSE-SU-2024:1646-1 Security update for the Linux Kernel | больше 2 лет назад |
Уязвимостей на страницу