CVE-2022-21546

linux: In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix WRITE_SAME No Data Buffer cras...

CVE-2022-21546 is fixed in 19 products on 1 platform, first by ELSA-2022-9827, released September 21, 2022. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
7.8
high
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0045
39th percentile

In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix WRITE_SAME No Data Buffer crash In newer version of the SBC specs, we have a NDOB bit that indicates there is no data buffer that gets written out. If this bit is set using commands like "sg_write_same --ndob" we will crash in target_core_iblock/file's execute_write_same handlers when we go to access the se_cmd->t_data_sg because its NULL. This patch adds a check for the NDOB bit in the common WRITE SAME code because we don't support it. And, it adds a check for zero SG elements in each handler in case the initiator tries to send a normal WRITE SAME with no data buffer.

Where it's fixed

ProductFixed inFixReleased
Linux
bpftool · ol 8 0:5.15.0-2.52.3.el9uek ELSA-2022-9827 Sep 21, 2022
bpftool · ol 9 0:5.15.0-2.52.3.el9uek ELSA-2022-9827 Sep 21, 2022
kernel-uek · ol 8 0:5.15.0-2.52.3.el9uek ELSA-2022-9827 Sep 21, 2022
kernel-uek · ol 9 0:5.15.0-2.52.3.el9uek ELSA-2022-9827 Sep 21, 2022
kernel-uek-container · ol 8 0:5.15.0-2.52.3.el8 ELSA-2022-9830 Sep 21, 2022
kernel-uek-container-debug · ol 8 0:5.15.0-2.52.3.el8 ELSA-2022-9830 Sep 21, 2022
kernel-uek-core · ol 8 0:5.15.0-2.52.3.el9uek ELSA-2022-9827 Sep 21, 2022
kernel-uek-core · ol 9 0:5.15.0-2.52.3.el9uek ELSA-2022-9827 Sep 21, 2022
kernel-uek-debug · ol 8 0:5.15.0-2.52.3.el9uek ELSA-2022-9827 Sep 21, 2022
kernel-uek-debug · ol 9 0:5.15.0-2.52.3.el9uek ELSA-2022-9827 Sep 21, 2022
kernel-uek-debug-core · ol 8 0:5.15.0-2.52.3.el9uek ELSA-2022-9827 Sep 21, 2022
kernel-uek-debug-core · ol 9 0:5.15.0-2.52.3.el9uek ELSA-2022-9827 Sep 21, 2022
kernel-uek-debug-devel · ol 8 0:5.15.0-2.52.3.el9uek ELSA-2022-9827 Sep 21, 2022
kernel-uek-debug-devel · ol 9 0:5.15.0-2.52.3.el9uek ELSA-2022-9827 Sep 21, 2022
kernel-uek-debug-modules · ol 8 0:5.15.0-2.52.3.el9uek ELSA-2022-9827 Sep 21, 2022
kernel-uek-debug-modules · ol 9 0:5.15.0-2.52.3.el9uek ELSA-2022-9827 Sep 21, 2022
kernel-uek-debug-modules-extra · ol 8 0:5.15.0-2.52.3.el9uek ELSA-2022-9827 Sep 21, 2022
kernel-uek-debug-modules-extra · ol 9 0:5.15.0-2.52.3.el9uek ELSA-2022-9827 Sep 21, 2022
kernel-uek-devel · ol 8 0:5.15.0-2.52.3.el9uek ELSA-2022-9827 Sep 21, 2022
kernel-uek-devel · ol 9 0:5.15.0-2.52.3.el9uek ELSA-2022-9827 Sep 21, 2022
kernel-uek-doc · ol 8 0:5.15.0-2.52.3.el9uek ELSA-2022-9827 Sep 21, 2022
kernel-uek-doc · ol 9 0:5.15.0-2.52.3.el9uek ELSA-2022-9827 Sep 21, 2022
kernel-uek-modules · ol 8 0:5.15.0-2.52.3.el9uek ELSA-2022-9827 Sep 21, 2022
kernel-uek-modules · ol 9 0:5.15.0-2.52.3.el9uek ELSA-2022-9827 Sep 21, 2022
kernel-uek-modules-extra · ol 8 0:5.15.0-2.52.3.el9uek ELSA-2022-9827 Sep 21, 2022
kernel-uek-modules-extra · ol 9 0:5.15.0-2.52.3.el9uek ELSA-2022-9827 Sep 21, 2022
kernel-uek-tools · ol 8 0:5.4.17-2136.311.6.el7uek ELSA-2022-9828 Sep 22, 2022
kernel-uek-tools-libs · ol 8 0:5.4.17-2136.311.6.el7uek ELSA-2022-9828 Sep 22, 2022
linux · Debian 12.15 (bookworm) 5.19.6-1 DEBIAN-CVE-2022-21546 May 2, 2025
linux · Debian 13.5 (trixie) 5.19.6-1 DEBIAN-CVE-2022-21546 May 2, 2025
linux · Debian 14 5.19.6-1 DEBIAN-CVE-2022-21546 May 2, 2025
perf · ol 8 0:5.4.17-2136.311.6.el7uek ELSA-2022-9828 Sep 22, 2022
python-perf · ol 8 0:5.4.17-2136.311.6.el7uek ELSA-2022-9828 Sep 22, 2022

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.