Description
drivers/scsi/libsas/sas_scsi_host.c in the Linux kernel before 4.16 allows local users to cause a denial of service (ata qc leak) by triggering certain failure conditions. NOTE: a third party disputes the relevance of this report because the failure can only occur for physically proximate attackers who unplug SAS Host Bus Adapter cables
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 4.15.17-1 | — |
| Debian 13 | linux | 4.15.17-1 | — |
| Debian 12 | linux | 4.15.17-1 | — |
| Debian 8 | linux | 3.16.59-1 | DLA-1529-1 |
| Debian 8 | linux-4.9 | 4.9.110-1~deb8u1 | DLA-1423-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | linux-gcp-6.11 +4 | No fix yet | — |
| Ubuntu 22.04 LTS | linux-riscv +2 | No fix yet | — |
| Ubuntu 20.04 LTS | linux-gke +3 | No fix yet | — |
| Ubuntu 18.04 LTS | linux | 4.15.0-23.25 | USN-3678-1 |
| Ubuntu 18.04 LTS | linux-aws | 4.15.0-1010.10 | USN-3678-1 |
| Ubuntu 18.04 LTS | linux-azure | 4.15.0-1013.13 | USN-3678-3 |
| Ubuntu 18.04 LTS | linux-gcp | 4.15.0-1009.9 | USN-3678-1 |
| Ubuntu 18.04 LTS | linux-kvm | 4.15.0-1011.11 | USN-3678-1 |
| Ubuntu 18.04 LTS | linux-oem | 4.15.0-1008.11 | — |
| Ubuntu 18.04 LTS | linux-raspi2 | 4.15.0-1012.13 | USN-3678-4 |
| Ubuntu 16.04 LTS | linux | 4.4.0-130.156 | USN-3696-1 |
| Ubuntu 16.04 LTS | linux-aws | 4.4.0-1062.71 | USN-3696-1 |
| Ubuntu 16.04 LTS | linux-azure | 4.15.0-1013.13~16.04.2 | USN-3678-2 |
| Ubuntu 16.04 LTS | linux-gcp | 4.15.0-1014.14~16.04.1 | — |
| Ubuntu 16.04 LTS | linux-hwe | 4.15.0-24.26~16.04.1 | — |
| Ubuntu 16.04 LTS | linux-kvm | 4.4.0-1029.34 | USN-3696-1 |
| Ubuntu 16.04 LTS | linux-raspi2 | 4.4.0-1092.100 | USN-3696-1 |
| Ubuntu 16.04 LTS | linux-snapdragon | 4.4.0-1095.100 | USN-3696-1 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 14.04 LTS | linux | 3.13.0-157.207 | USN-3754-1 |
| Ubuntu 14.04 LTS | linux-aws | 4.4.0-1024.25 | USN-3696-2 |
| Ubuntu 14.04 LTS | linux-lts-xenial | 4.4.0-130.156~14.04.1 | USN-3696-2 |
| Ubuntu Pro FIPS-updates 16.04 LTS | linux-fips | 4.4.0-1008.10 | — |
| Ubuntu Pro 20.04 LTS | linux-azure-fde-5.15 | No fix yet | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | dtrace-modules-3.8.13-118.28.1.el6uek +1 | 0.4.5-3.el6 | ELSA-2019-4316, ELSA-2018-4300 |
| Oracle Linux 7 | dtrace-modules-3.8.13-118.28.1.el7uek +1 | 0.4.5-3.el7 | ELSA-2019-4316, ELSA-2018-4300 |
| Oracle Linux 7 | kernel-uek +5 | 3.8.13-118.28.1.el7uek | ELSA-2019-4316, ELSA-2018-4300 |
Advisories 11
- USN-3754-1 linux vulnerabilities Ubuntu Security Notices (USN) · Jun 3, 2026
- USN-3696-1 linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities Ubuntu Security Notices (USN) · Apr 22, 2026
- USN-3678-1 linux, linux-aws, linux-gcp, linux-kvm vulnerabilities Ubuntu Security Notices (USN) · Apr 22, 2026
- DLA-1529-1 linux - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-1423-1 linux-4.9 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- USN-3696-2 linux-lts-xenial, linux-aws vulnerabilities Ubuntu Security Notices (USN) · Feb 10, 2026
- USN-3678-2 linux-azure vulnerabilities Ubuntu Security Notices (USN) · Feb 10, 2026
- USN-3678-3 linux-azure vulnerabilities Ubuntu Security Notices (USN) · Feb 10, 2026
- USN-3678-4 linux-raspi2 vulnerabilities Ubuntu Security Notices (USN) · Feb 10, 2026
- ELSA-2019-4316 Important: Unbreakable Enterprise kernel security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Jan 4, 2019
- ELSA-2018-4300 Important: Unbreakable Enterprise kernel security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Dec 6, 2018
References
- USN-3678-2 vendor-advisory
- USN-3696-1 vendor-advisory
- USN-3678-1 vendor-advisory
- https://bugzilla.suse.com/show_bug.cgi?id=1089281
- USN-3754-1 vendor-advisory
- [debian-lts-announce] 20180718 [SECURITY] [DLA 1423-1] linux-4.9 new package mailing-list
- USN-3678-3 vendor-advisory
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=318aaf34f1179b39fa9c30fa0f3288b645beee39
- https://github.com/torvalds/linux/commit/318aaf34f1179b39fa9c30fa0f3288b645beee39
- USN-3696-2 vendor-advisory
- USN-3678-4 vendor-advisory