Database/Control plane, storage & DevOps
Linux iSCSI: Unprivileged user can craft Netlink messages to scsi_transport_iscsi
CVSS 7.1CVE-2021-27364Control plane, storage & DevOpscurated
Impact
Unprivileged user can craft Netlink messages to scsi_transport_iscsi
Who can reach it
Local
What to do
Data-plane: kernel patch + reboot
References
Related entries
- Linux iSCSI: Kernel pointer leak - iscsi_transport handle exposed to unprivileged users via sysfsCVE-2021-27363 · Linux iSCSIMedium
- Linux iSCSI: iSCSI netlink structures lack length checksCVE-2021-27365 · Linux iSCSIHigh
- linuxptp / ptp4l (transparent clock on little-endian): A crafted PTP packet against ptp4l running as a transparentCVE-2021-3571 · linuxptp / ptp4l (transparent clock on little-endian)High
- Schneider Electric Data Center Expert (versions prior to v7.9.0) - Java deserialization: Unsafe deserialization of dataCVE-2022-32521 · Schneider Electric Data Center Expert (versions prior to v7.9.0) - Java deserializationHigh
- IBM Storage Scale Container Native Storage Access (namespace boundary): A local attacker can initiate connections fromCVE-2022-41737 · IBM Storage Scale Container Native Storage Access (namespace boundary)High
- SK Hynix DDR5 DIMMs (manufactured 2021-01 through 2024-12): Rowhammer bit flips on DDR5, which had been assumed outCVE-2025-6202 · SK Hynix DDR5 DIMMs (manufactured 2021-01 through 2024-12)High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.