https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 18:44:17 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-06525 bdu:2024-06525 https://cve.radiocsirt.org/vuln/bdu:2024-06525 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0693 certfr-2024-avi-0693 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0693 https://cve.radiocsirt.org/vuln/euvd-2026-344586 EUVD-2026-344586 https://cve.radiocsirt.org/vuln/euvd-2026-344586 https://cve.radiocsirt.org/vuln/fkie_cve-2022-48791 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>scsi: pm8001: Fix use-after-free for aborted TMF sas_task</p> <p>Currently a use-after-free may occur if a TMF sas_task is aborted before we handle the IO completion in mpi_ssp_completion(). The abort occurs due to timeout.</p> <p>When the timeout occurs, the SAS_TASK_STATE_ABORTED flag is set and the sas_task is freed in pm8001_exec_internal_tmf_task().</p> <p>However, if the I/O completion occurs later, the I/O completion still thinks that the sas_task is available. Fix this by clearing the ccb-&gt;task if the TMF times out - the I/O completion handler does nothing if this pointer is cleared.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>scsi: pm8001: Fix use-after-free for aborted TMF sas_task</p> <p>Currently a use-after-free may occur if a TMF sas_task is aborted before we handle the IO completion in mpi_ssp_completion(). The abort occurs due to timeout.</p> <p>When the timeout occurs, the SAS_TASK_STATE_ABORTED flag is set and the sas_task is freed in pm8001_exec_internal_tmf_task().</p> <p>However, if the I/O completion occurs later, the I/O completion still thinks that the sas_task is available. Fix this by clearing the ccb-&gt;task if the TMF times out - the I/O completion handler does nothing if this pointer is cleared.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-48791 https://cve.radiocsirt.org/vuln/ghsa-hrwc-pg2q-pgc2 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>scsi: pm8001: Fix use-after-free for aborted TMF sas_task</p> <p>Currently a use-after-free may occur if a TMF sas_task is aborted before we handle the IO completion in mpi_ssp_completion(). The abort occurs due to timeout.</p> <p>When the timeout occurs, the SAS_TASK_STATE_ABORTED flag is set and the sas_task is freed in pm8001_exec_internal_tmf_task().</p> <p>However, if the I/O completion occurs later, the I/O completion still thinks that the sas_task is available. Fix this by clearing the ccb-&gt;task if the TMF times out - the I/O completion handler does nothing if this pointer is cleared.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>scsi: pm8001: Fix use-after-free for aborted TMF sas_task</p> <p>Currently a use-after-free may occur if a TMF sas_task is aborted before we handle the IO completion in mpi_ssp_completion(). The abort occurs due to timeout.</p> <p>When the timeout occurs, the SAS_TASK_STATE_ABORTED flag is set and the sas_task is freed in pm8001_exec_internal_tmf_task().</p> <p>However, if the I/O completion occurs later, the I/O completion still thinks that the sas_task is available. Fix this by clearing the ccb-&gt;task if the TMF times out - the I/O completion handler does nothing if this pointer is cleared.</p> https://cve.radiocsirt.org/vuln/ghsa-hrwc-pg2q-pgc2 https://cve.radiocsirt.org/vuln/suse-su-2024:2894-1 <p>Security update for the Linux Kernel</p> <p>Security update for the Linux Kernel</p> https://cve.radiocsirt.org/vuln/suse-su-2024:2894-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-48791 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe and 115 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix use-after-free for aborted TMF sas_task Currently a use-after-free may occur if a TMF sas_task is aborted before we handle the IO completion in mpi_ssp_completion(). The abort occurs due to timeout. When the timeout occurs, the SAS_TASK_STATE_ABORTED flag is set and the sas_task is freed in pm8001_exec_internal_tmf_task(). However, if the I/O completion occurs later, the I/O completion still thinks that the sas_task is available. Fix this by clearing the ccb-&gt;task if the TMF times out - the I/O completion handler does nothing if this pointer is cleared.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe and 115 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix use-after-free for aborted TMF sas_task Currently a use-after-free may occur if a TMF sas_task is aborted before we handle the IO completion in mpi_ssp_completion(). The abort occurs due to timeout. When the timeout occurs, the SAS_TASK_STATE_ABORTED flag is set and the sas_task is freed in pm8001_exec_internal_tmf_task(). However, if the I/O completion occurs later, the I/O completion still thinks that the sas_task is available. Fix this by clearing the ccb-&gt;task if the TMF times out - the I/O completion handler does nothing if this pointer is cleared.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-48791 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1625 <p>Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1625