Remote No

Type Insufficient validation

Description

A security issue was found in the Linux kernel. This vulnerability allows any user to connect to the iscsi NETLINK socket and send commands to the kernel, such as "end a session".

AVG-1661 linux-lts 5.10.20-1 Medium Vulnerable

AVG-1660 linux-hardened 5.10.19.hardened1-1 Medium Vulnerable

AVG-1659 linux-zen 5.11.3.zen1-1 Medium Vulnerable

AVG-1658 linux 5.11.3.arch4-1 Medium Vulnerable

https://www.openwall.com/lists/oss-security/2021/03/06/1
https://bugzilla.suse.com/show_bug.cgi?id=1182717
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=688e8128b7a92df982709a4137ea4588d16f24aa