In the Linux kernel, the following vulnerability has been resolved:
scsi: target: pscsi: Fix bio_put() for error case
As of commit 066ff571011d ("block: turn bio_kmalloc into a simple kmalloc wrapper"), a bio allocated by bio_kmalloc() must be freed by bio_uninit() and kfree(). That is not done properly for the error case, hitting WARN and NULL pointer dereference in bio_free().
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.82-99.168Upgrade kernelUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-libbpf | Feb 17, 2025 | Apr 3, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 3, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 3, 2024 |
| Suse | — | Upgrade kernel-azureUpgrade kernel-obs-buildUpgrade kernel-rt-extraUpgrade kernel-azure-vdsoUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade dtb-xilinxUpgrade kernel-syms-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-renesasUpgrade kernel-rt-vdsoUpgrade kernel-docsUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-default-base-rebuildUpgrade kernel-rt-develUpgrade dtb-armUpgrade dtb-mediatekUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade dtb-sprdUpgrade dlm-kmp-rtUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-rtUpgrade dtb-socionextUpgrade kernel-rt_debugUpgrade dlm-kmp-azureUpgrade kernel-devel-rtUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-vanillaUpgrade kernel-debug-develUpgrade kernel-debugUpgrade dtb-qcomUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-azure-develUpgrade dtb-amazonUpgrade kernel-rt-livepatchUpgrade kernel-rt_debug-develUpgrade kernel-rtUpgrade cluster-md-kmp-rtUpgrade kernel-source-rtUpgrade dtb-marvellUpgrade cluster-md-kmp-azureUpgrade dtb-alteraUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade kernel-default-extraUpgrade kernel-azure-livepatch-develUpgrade dtb-allwinnerUpgrade kselftests-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-docs-htmlUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade gfs2-kmp-64kbUpgrade dtb-lgUpgrade dlm-kmp-64kbUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade dtb-apmUpgrade gfs2-kmp-azureUpgrade kernel-rt-optionalUpgrade dtb-appleUpgrade kernel-kvmsmall-develUpgrade kernel-azure-optionalUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-default-develUpgrade dtb-broadcomUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade dtb-exynosUpgrade dtb-freescaleUpgrade reiserfs-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-devel-azureUpgrade dtb-caviumUpgrade dtb-amlogicUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade kernel-sourceUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-rtUpgrade dtb-amd | May 6, 2024 | Apr 3, 2024 |
| Ubuntu | — | Upgrade linux-raspi-realtime | Feb 11, 2025 | Apr 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Apr 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub