In the Linux kernel, the following vulnerability has been resolved:
scsi: pm8001: Fix use-after-free for aborted TMF sas_task
Currently a use-after-free may occur if a TMF sas_task is aborted before we handle the IO completion in mpi_ssp_completion(). The abort occurs due to timeout.
When the timeout occurs, the SAS_TASK_STATE_ABORTED flag is set and the sas_task is freed in pm8001_exec_internal_tmf_task().
However, if the I/O completion occurs later, the I/O completion still thinks that the sas_task is available. Fix this by clearing the ccb->task if the TMF times out - the I/O completion handler does nothing if this pointer is cleared.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 30, 2024 |
| Dell Powerstore Dsa2025086 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Feb 20, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 16, 2024 |
| Ubuntu | — | Upgrade linux-image-oracleUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.4.0-1137-kvmUpgrade linux-image-awsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1137-gcpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-lowlatency-lts-wilyUpgrade linux-image-4.4.0-1136-awsUpgrade linux-image-4.15.0-1156-kvmUpgrade linux-image-virtual-lts-vividUpgrade linux-image-oemUpgrade linux-image-lowlatency-lts-utopicUpgrade linux-image-generic-lts-utopicUpgrade linux-image-4.15.0-229-lowlatencyUpgrade linux-image-virtual-lts-wilyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-1138-azureUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-oem-osp1Upgrade linux-image-kvmUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-1174-awsUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.4.0-259-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1080-ibmUpgrade linux-image-4.15.0-1181-azureUpgrade linux-image-4.15.0-1135-oracleUpgrade linux-image-4.15.0-1173-awsUpgrade linux-image-virtualUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1133-awsUpgrade linux-image-4.15.0-1166-gcpUpgrade linux-image-4.4.0-259-lowlatencyUpgrade linux-image-5.4.0-1052-xilinx-zynqmpUpgrade linux-image-4.15.0-229-genericUpgrade linux-image-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-azureUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-196-genericUpgrade linux-image-5.4.0-196-lowlatencyUpgrade linux-image-genericUpgrade linux-image-generic-lts-wilyUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1117-raspiUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-virtual-lts-utopicUpgrade linux-image-5.4.0-196-generic-lpaeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1100-gkeopUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1044-iotUpgrade linux-image-generic-lts-vividUpgrade linux-image-5.4.0-1121-kvmUpgrade linux-image-aws-hweUpgrade linux-image-raspiUpgrade linux-image-ibmUpgrade linux-image-lowlatency-lts-vividUpgrade linux-image-5.4.0-1132-oracleUpgrade linux-image-5.4.0-1093-bluefieldUpgrade linux-image-gkeop-5.4Upgrade linux-image-generic-lpaeUpgrade linux-image-raspi2 | Sep 20, 2024 | Jul 16, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jul 16, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub