In the Linux kernel, the following vulnerability has been resolved:
scsi: target: core: Fix null-ptr-deref in target_alloc_device()
There is a null-ptr-deref issue reported by KASAN:
BUG: KASAN: null-ptr-deref in target_alloc_device+0xbc4/0xbe0 [target_core_mod] ... kasan_report+0xb9/0xf0 target_alloc_device+0xbc4/0xbe0 [target_core_mod] core_dev_setup_virtual_lun0+0xef/0x1f0 [target_core_mod] target_core_init_configfs+0x205/0x420 [target_core_mod] do_one_initcall+0xdd/0x4e0 ... entry_SYSCALL_64_after_hwframe+0x76/0x7e
In target_alloc_device(), if allocing memory for dev queues fails, then dev will be freed by dev->transport->free_device(), but dev->transport is not initialized at that time, which will lead to a null pointer reference problem.
Fixing this bug by freeing dev with hba->backend->ops->free_device().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-livepatch-5.15.173-118.169Upgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-livepatch-5.10.230-223.885Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade perfUpgrade kernel-tools-develUpgrade python-perf | Mar 14, 2025 | Nov 7, 2024 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-modules-extraUpgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-libbpfUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.115-126.197Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade perf | Mar 27, 2025 | Nov 7, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Nov 11, 2024 | Nov 7, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | May 15, 2025 | Nov 7, 2024 |
| Ubuntu | — | Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1081-azure-fdeUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1070-ibmUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1078-awsUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-5.15.0-134-generic-lpaeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1060-gkeopUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-realtimeUpgrade linux-image-5.15.0-134-genericUpgrade linux-image-5.15.0-1081-azureUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-oem-24.04Upgrade linux-image-oem-20.04Upgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1072-nvidia-lowlatencyUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-virtualUpgrade linux-image-awsUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-5.15.0-1075-gkeUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-133-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-133-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-azureUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-intelUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-5.15.0-1072-raspiUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-133-genericUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-azure-nvidiaUpgrade linux-image-5.15.0-133-generic-64kUpgrade linux-image-genericUpgrade linux-image-5.15.0-1072-nvidiaUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-oem-22.04aUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-5.15.0-1077-gcpUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-5.15.0-1073-intel-iotgUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-133-generic-lpaeUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-azure-fdeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-5.15.0-1075-oracleUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1026-oemUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-intel-iotgUpgrade linux-image-ibm-classicUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-gkeopUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-5.15.0-134-generic-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.11.0-1009-aws | Feb 20, 2025 | Nov 7, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Nov 7, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub