Description
In the Linux kernel, the following vulnerability has been resolved: scsi: target: Reset t_task_cdb pointer in error case If allocation of cmd->t_task_cdb fails, it remains NULL but is later dereferenced in the 'err' path. In case of error, reset NULL t_task_cdb value to point at the default fixed-size buffer. Found by Linux Verification Center (linuxtesting.org) with SVACE.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
9e95fb805dc043cc8ed878a08d1583e4097a5f80 to < 6cac97b12bdab04832e0416d049efcd0d48d303baffected9e95fb805dc043cc8ed878a08d1583e4097a5f80 to < 45fd86b444105c8bd07a763f58635c87e5dc7aeaaffected9e95fb805dc043cc8ed878a08d1583e4097a5f80 to < 8727663ded659aad55eef21e3864ebf5a4796a96affected9e95fb805dc043cc8ed878a08d1583e4097a5f80 to < 0260ad551b0815eb788d47f32899fbcd65d6f128affected9e95fb805dc043cc8ed878a08d1583e4097a5f80 to < 0d36db68fdb8a3325386fd9523b67735f944e1f3affected9e95fb805dc043cc8ed878a08d1583e4097a5f80 to < 8edbb9e371af186b4cf40819dab65fafe109df4daffected9e95fb805dc043cc8ed878a08d1583e4097a5f80 to < 5053eab38a4c4543522d0c320c639c56a8b59908affected
Linux Linux
Default version status: affected
5.8affected0 to < 5.8unaffected5.10.248 to ≤ 5.10.*unaffected5.15.198 to ≤ 5.15.*unaffected6.1.160 to ≤ 6.1.*unaffected6.6.120 to ≤ 6.6.*unaffected6.12.64 to ≤ 6.12.*unaffected6.18.3 to ≤ 6.18.*unaffected6.19 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/6cac97b12bdab04832e0416d049efcd0d48d303b ↗
- https://git.kernel.org/stable/c/45fd86b444105c8bd07a763f58635c87e5dc7aea ↗
- https://git.kernel.org/stable/c/8727663ded659aad55eef21e3864ebf5a4796a96 ↗
- https://git.kernel.org/stable/c/0260ad551b0815eb788d47f32899fbcd65d6f128 ↗
- https://git.kernel.org/stable/c/0d36db68fdb8a3325386fd9523b67735f944e1f3 ↗
- https://git.kernel.org/stable/c/8edbb9e371af186b4cf40819dab65fafe109df4d ↗
- https://git.kernel.org/stable/c/5053eab38a4c4543522d0c320c639c56a8b59908 ↗
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-457936.html ↗