In the Linux kernel, the following vulnerability has been resolved:
scsi: target: pscsi: Fix bio_put() for error case
As of commit 066ff571011d ("block: turn bio_kmalloc into a simple kmalloc wrapper"), a bio allocated by bio_kmalloc() must be freed by bio_uninit() and kfree(). That is not done properly for the error case, hitting WARN and NULL pointer dereference in bio_free().
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.82-99.168Upgrade kernel-libbpf-develUpgrade bpftoolUpgrade perfUpgrade kernel-modules-extra-commonUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-static | Feb 17, 2025 | Apr 3, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 3, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 3, 2024 |
| Suse | — | Upgrade kernel-debug-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-rtUpgrade dtb-nvidiaUpgrade dtb-armUpgrade dtb-renesasUpgrade dtb-mediatekUpgrade kernel-docsUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-rt_debugUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-syms-rtUpgrade kernel-azureUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-azureUpgrade kernel-rt-extraUpgrade reiserfs-kmp-azureUpgrade dtb-rockchipUpgrade reiserfs-kmp-defaultUpgrade dtb-socionextUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-devel-rtUpgrade kernel-rt-develUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-rtUpgrade kernel-default-livepatch-develUpgrade dtb-sprdUpgrade reiserfs-kmp-rtUpgrade dtb-xilinxUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade kernel-azure-vdsoUpgrade dtb-lgUpgrade kernel-macrosUpgrade kernel-develUpgrade dtb-apmUpgrade dtb-amlogicUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-develUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-default-vdsoUpgrade gfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-azure-optionalUpgrade gfs2-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade dtb-marvellUpgrade dtb-appleUpgrade kernel-default-extraUpgrade dtb-hisiliconUpgrade kernel-zfcpdumpUpgrade kernel-source-rtUpgrade kernel-azure-livepatch-develUpgrade dtb-allwinnerUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade kernel-default-optionalUpgrade dtb-freescaleUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-64kb-develUpgrade dtb-alteraUpgrade kernel-symsUpgrade kernel-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-rtUpgrade cluster-md-kmp-rtUpgrade dtb-qcomUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade dtb-exynosUpgrade dtb-caviumUpgrade dtb-broadcomUpgrade kernel-rt-livepatchUpgrade kernel-debugUpgrade kernel-azure-develUpgrade ocfs2-kmp-rtUpgrade kernel-source-azureUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-rtUpgrade kernel-rt_debug-develUpgrade dtb-amazonUpgrade dtb-amdUpgrade kernel-sourceUpgrade ocfs2-kmp-default | May 6, 2024 | Apr 3, 2024 |
| Ubuntu | — | Upgrade linux-raspi-realtime | Feb 11, 2025 | Apr 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Apr 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub