IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2026-09-16 11:17

MODIFIED

2026-09-16 11:17

EPSS (Prob. Exploit)

0.17%

Top 94.6%

DATA SOURCES:

NVD 🔗 2026-09-16 FIRST EPSS 🔗 2026-10-25 OSV 🔗 2026-09-22

> DESCRIPTION

In the Linux kernel, the following vulnerability has been resolved: scsi: bsg: Cap io_uring sense copy to max_response_len Completion copied scmd->sense_len to the user response buffer without honoring max_response_len. After a valid sense, the midlayer sets sense_len to the real length (up to SCSI_SENSE_BUFFERSIZE), so a smaller user buffer was overrun.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

scsi: bsg: Cap io_uring sense copy to max_response_len

AFFECTED PACKAGES:

Unknown / Unknown

Linux / Kernel

> HISTORIQUE DES MODIFICATIONS

Première apparition

16/09/2026 11:17

Source: NVD

Total des modifications: 0 Dernière mise à jour: 1 month ago

> REFERENCES

https://git.kernel.org/stable/c/5d326efc334ea21afd8161f6ca53e17de71948a9