In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint If vhost_scsi_set_endpoint is called multiple times without…
高危 CVSS 7.8
摘要
In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint If vhost_scsi_set_endpoint is called multiple times without a vhost_scsi_clear_endpoint between them, we can hit multiple bugs found by Haoran Zhang: 1. Use-after-free when no tpgs are found: This fixes a use after free that occurs when vhost_scsi_set_endpoint is called more than once and calls after the first call do not find any tpgs to add to the vs_tp…
中文摘要建设中,暂以英文摘要呈现(DR-003 v2)。
深度研判 · 自动通道
该漏洞尚未生成深度研判报告(DR-003 v2 AI pipeline 建设中)。
受影响产品
- :
数据来源
- NVD DATABASE
原始链接
- https://git.kernel.org/stable/c/2b34bdc42df047794542f3e220fe989124e4499a Patch
- https://git.kernel.org/stable/c/3a19eb3d9818e28f14c818a18dc913344a52ca92 Patch
- https://git.kernel.org/stable/c/3fd054baf382a426bbf5135ede0fc5673db74d3e Patch
- https://git.kernel.org/stable/c/451c72f5e7cf5d339a6410a635cee0825687c3dc Patch
- https://git.kernel.org/stable/c/5dd639a1646ef5fe8f4bf270fad47c5c3755b9b6 Patch
- https://git.kernel.org/stable/c/63b449f73ab0dcc0ba11ceaa4c5c70bc86ccf03c Patch
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
时间线
- nvd_ingest NVD