Summary
Shaomin Chen discovered that sg3_utils did not properly sanitize device
identification data. An attacker could possibly use this issue to
execute arbitrary commands.
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | sg3-utils | 1.46-1ubuntu0.22.04.2 |
| Ubuntu · 24.04 LTS 24.04:LTS | sg3-utils | 1.46-3ubuntu4.1 |
| Ubuntu · 26.04 LTS 26.04:LTS | sg3-utils | 1.48-3ubuntu3.2 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | sg3-utils | 1.36-1ubuntu1+esm1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | sg3-utils | 1.40-0ubuntu1+esm1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | sg3-utils | 1.42-2ubuntu1.18.04.2+esm1 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | sg3-utils | 1.44-1ubuntu2+esm1 |
Vulnerabilities 1
-
High 7.6
Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export
A flaw was found in sg3_utils. The sg_inq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can in…
References
-
report
https://ubuntu.com/security/CVE-2026-16313