The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read()
If kzalloc() fails in lpfc_sli4_cgn_params_read(), then we rely on lpfc_read_object()'s routine to NULL check pdata.
Currently, an early return error is thrown from lpfc_read_object() to protect us from NULL ptr dereference, but the errno code is -ENODEV.
Change the errno code to a more appropriate -ENOMEM.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 5, 2025 | May 2, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 2, 2025 |
| Ubuntu | — | Upgrade linux-raspiUpgrade linux-nvidia-tegra-5.15Upgrade linux-azureUpgrade linux-awsUpgrade linuxUpgrade linux-hwe-5.15Upgrade linux-ibmUpgrade linux-intel-iot-realtimeUpgrade linux-bluefieldUpgrade linux-intel-iotgUpgrade linux-aws-5.15Upgrade linux-oracle-5.15Upgrade linux-kvmUpgrade linux-riscv-5.15Upgrade linux-azure-fdeUpgrade linux-gcp-5.15Upgrade linux-nvidiaUpgrade linux-azure-fde-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-gkeUpgrade linux-gkeopUpgrade linux-oracleUpgrade linux-lowlatency-hwe-5.15Upgrade linux-nvidia-tegraUpgrade linux-xilinx-zynqmpUpgrade linux-ibm-5.15Upgrade linux-realtimeUpgrade linux-gcpUpgrade linux-azure-5.15Upgrade linux-lowlatencyUpgrade linux-nvidia-tegra-igx | May 8, 2025 | May 2, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub