In the Linux kernel, the following vulnerability has been resolved:
scsi: target: core: Fix null-ptr-deref in target_alloc_device()
There is a null-ptr-deref issue reported by KASAN:
BUG: KASAN: null-ptr-deref in target_alloc_device+0xbc4/0xbe0 [target_core_mod] ... kasan_report+0xb9/0xf0 target_alloc_device+0xbc4/0xbe0 [target_core_mod] core_dev_setup_virtual_lun0+0xef/0x1f0 [target_core_mod] target_core_init_configfs+0x205/0x420 [target_core_mod] do_one_initcall+0xdd/0x4e0 ... entry_SYSCALL_64_after_hwframe+0x76/0x7e
In target_alloc_device(), if allocing memory for dev queues fails, then dev will be freed by dev->transport->free_device(), but dev->transport is not initialized at that time, which will lead to a null pointer reference problem.
Fixing this bug by freeing dev with hba->backend->ops->free_device().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.230-223.885Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.173-118.169Upgrade kernel-tools-develUpgrade perfUpgrade python-perfUpgrade kernel-toolsUpgrade kernelUpgrade bpftool | Mar 14, 2025 | Nov 7, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade perfUpgrade bpftoolUpgrade kernel-livepatch-6.1.115-126.197Upgrade kernel-debuginfo-common-aarch64 | Mar 27, 2025 | Nov 7, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Nov 11, 2024 | Nov 7, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | May 15, 2025 | Nov 7, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1073-intel-iotgUpgrade linux-image-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-5.15.0-133-generic-lpaeUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-22.04dUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-5.15.0-1072-raspiUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1075-oracleUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-134-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-22.04cUpgrade linux-image-gke-5.15Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-azureUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-gkeopUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-intelUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-5.15.0-1077-gcpUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-nvidia-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-133-genericUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1072-nvidiaUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1026-oemUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-intel-iotgUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-133-generic-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-oem-20.04cUpgrade linux-image-genericUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-5.15.0-134-generic-lpaeUpgrade linux-image-5.15.0-1070-ibmUpgrade linux-image-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-133-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1072-nvidia-lowlatencyUpgrade linux-image-5.15.0-1075-gkeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1081-azure-fdeUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-133-lowlatencyUpgrade linux-image-realtimeUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1060-gkeopUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1081-azureUpgrade linux-image-gkeUpgrade linux-image-raspi-realtimeUpgrade linux-image-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-kvmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1027-azureUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oem-24.04bUpgrade linux-image-5.15.0-134-genericUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-5.15.0-1078-awsUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04 | Feb 20, 2025 | Nov 7, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Nov 7, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub