# CVE-2022-21546: linux: In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix WRITE_SAME No Data Buffer cras... CVE-2022-21546 is fixed in 19 products on 1 platform, first by ELSA-2022-9827, released September 21, 2022. It is not reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/cve/CVE-2022-21546 - Priority: High - CVSS: 7.8 (high) - EPSS: 0.0045 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Sep 21, 2022 ## Description In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix WRITE_SAME No Data Buffer crash In newer version of the SBC specs, we have a NDOB bit that indicates there is no data buffer that gets written out. If this bit is set using commands like "sg_write_same --ndob" we will crash in target_core_iblock/file's execute_write_same handlers when we go to access the se_cmd->t_data_sg because its NULL. This patch adds a check for the NDOB bit in the common WRITE SAME code because we don't support it. And, it adds a check for zero SG elements in each handler in case the initiator tries to send a normal WRITE SAME with no data buffer. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | bpftool ol 8 | 0:5.15.0-2.52.3.el9uek | [ELSA-2022-9827](https://patchblox.com/security/data/fix/linux/elsa-2022-9827.md) | Sep 21, 2022 | | Linux | bpftool ol 9 | 0:5.15.0-2.52.3.el9uek | [ELSA-2022-9827](https://patchblox.com/security/data/fix/linux/elsa-2022-9827.md) | Sep 21, 2022 | | Linux | kernel-uek ol 8 | 0:5.15.0-2.52.3.el9uek | [ELSA-2022-9827](https://patchblox.com/security/data/fix/linux/elsa-2022-9827.md) | Sep 21, 2022 | | Linux | kernel-uek ol 9 | 0:5.15.0-2.52.3.el9uek | [ELSA-2022-9827](https://patchblox.com/security/data/fix/linux/elsa-2022-9827.md) | Sep 21, 2022 | | Linux | kernel-uek-container ol 8 | 0:5.15.0-2.52.3.el8 | [ELSA-2022-9830](https://patchblox.com/security/data/fix/linux/elsa-2022-9830.md) | Sep 21, 2022 | | Linux | kernel-uek-container-debug ol 8 | 0:5.15.0-2.52.3.el8 | [ELSA-2022-9830](https://patchblox.com/security/data/fix/linux/elsa-2022-9830.md) | Sep 21, 2022 | | Linux | kernel-uek-core ol 8 | 0:5.15.0-2.52.3.el9uek | [ELSA-2022-9827](https://patchblox.com/security/data/fix/linux/elsa-2022-9827.md) | Sep 21, 2022 | | Linux | kernel-uek-core ol 9 | 0:5.15.0-2.52.3.el9uek | [ELSA-2022-9827](https://patchblox.com/security/data/fix/linux/elsa-2022-9827.md) | Sep 21, 2022 | | Linux | kernel-uek-debug ol 8 | 0:5.15.0-2.52.3.el9uek | [ELSA-2022-9827](https://patchblox.com/security/data/fix/linux/elsa-2022-9827.md) | Sep 21, 2022 | | Linux | kernel-uek-debug ol 9 | 0:5.15.0-2.52.3.el9uek | [ELSA-2022-9827](https://patchblox.com/security/data/fix/linux/elsa-2022-9827.md) | Sep 21, 2022 | | Linux | kernel-uek-debug-core ol 8 | 0:5.15.0-2.52.3.el9uek | [ELSA-2022-9827](https://patchblox.com/security/data/fix/linux/elsa-2022-9827.md) | Sep 21, 2022 | | Linux | kernel-uek-debug-core ol 9 | 0:5.15.0-2.52.3.el9uek | [ELSA-2022-9827](https://patchblox.com/security/data/fix/linux/elsa-2022-9827.md) | Sep 21, 2022 | | Linux | kernel-uek-debug-devel ol 8 | 0:5.15.0-2.52.3.el9uek | [ELSA-2022-9827](https://patchblox.com/security/data/fix/linux/elsa-2022-9827.md) | Sep 21, 2022 | | Linux | kernel-uek-debug-devel ol 9 | 0:5.15.0-2.52.3.el9uek | [ELSA-2022-9827](https://patchblox.com/security/data/fix/linux/elsa-2022-9827.md) | Sep 21, 2022 | | Linux | kernel-uek-debug-modules ol 8 | 0:5.15.0-2.52.3.el9uek | [ELSA-2022-9827](https://patchblox.com/security/data/fix/linux/elsa-2022-9827.md) | Sep 21, 2022 | | Linux | kernel-uek-debug-modules ol 9 | 0:5.15.0-2.52.3.el9uek | [ELSA-2022-9827](https://patchblox.com/security/data/fix/linux/elsa-2022-9827.md) | Sep 21, 2022 | | Linux | kernel-uek-debug-modules-extra ol 8 | 0:5.15.0-2.52.3.el9uek | [ELSA-2022-9827](https://patchblox.com/security/data/fix/linux/elsa-2022-9827.md) | Sep 21, 2022 | | Linux | kernel-uek-debug-modules-extra ol 9 | 0:5.15.0-2.52.3.el9uek | [ELSA-2022-9827](https://patchblox.com/security/data/fix/linux/elsa-2022-9827.md) | Sep 21, 2022 | | Linux | kernel-uek-devel ol 8 | 0:5.15.0-2.52.3.el9uek | [ELSA-2022-9827](https://patchblox.com/security/data/fix/linux/elsa-2022-9827.md) | Sep 21, 2022 | | Linux | kernel-uek-devel ol 9 | 0:5.15.0-2.52.3.el9uek | [ELSA-2022-9827](https://patchblox.com/security/data/fix/linux/elsa-2022-9827.md) | Sep 21, 2022 | | Linux | kernel-uek-doc ol 8 | 0:5.15.0-2.52.3.el9uek | [ELSA-2022-9827](https://patchblox.com/security/data/fix/linux/elsa-2022-9827.md) | Sep 21, 2022 | | Linux | kernel-uek-doc ol 9 | 0:5.15.0-2.52.3.el9uek | [ELSA-2022-9827](https://patchblox.com/security/data/fix/linux/elsa-2022-9827.md) | Sep 21, 2022 | | Linux | kernel-uek-modules ol 8 | 0:5.15.0-2.52.3.el9uek | [ELSA-2022-9827](https://patchblox.com/security/data/fix/linux/elsa-2022-9827.md) | Sep 21, 2022 | | Linux | kernel-uek-modules ol 9 | 0:5.15.0-2.52.3.el9uek | [ELSA-2022-9827](https://patchblox.com/security/data/fix/linux/elsa-2022-9827.md) | Sep 21, 2022 | | Linux | kernel-uek-modules-extra ol 8 | 0:5.15.0-2.52.3.el9uek | [ELSA-2022-9827](https://patchblox.com/security/data/fix/linux/elsa-2022-9827.md) | Sep 21, 2022 | | Linux | kernel-uek-modules-extra ol 9 | 0:5.15.0-2.52.3.el9uek | [ELSA-2022-9827](https://patchblox.com/security/data/fix/linux/elsa-2022-9827.md) | Sep 21, 2022 | | Linux | kernel-uek-tools ol 8 | 0:5.4.17-2136.311.6.el7uek | [ELSA-2022-9828](https://patchblox.com/security/data/fix/linux/elsa-2022-9828.md) | Sep 22, 2022 | | Linux | kernel-uek-tools-libs ol 8 | 0:5.4.17-2136.311.6.el7uek | [ELSA-2022-9828](https://patchblox.com/security/data/fix/linux/elsa-2022-9828.md) | Sep 22, 2022 | | Linux | linux Debian 12.15 (bookworm) | 5.19.6-1 | [DEBIAN-CVE-2022-21546](https://patchblox.com/security/data/fix/linux/debian-cve-2022-21546.md) | May 2, 2025 | | Linux | linux Debian 13.5 (trixie) | 5.19.6-1 | [DEBIAN-CVE-2022-21546](https://patchblox.com/security/data/fix/linux/debian-cve-2022-21546.md) | May 2, 2025 | | Linux | linux Debian 14 | 5.19.6-1 | [DEBIAN-CVE-2022-21546](https://patchblox.com/security/data/fix/linux/debian-cve-2022-21546.md) | May 2, 2025 | | Linux | perf ol 8 | 0:5.4.17-2136.311.6.el7uek | [ELSA-2022-9828](https://patchblox.com/security/data/fix/linux/elsa-2022-9828.md) | Sep 22, 2022 | | Linux | python-perf ol 8 | 0:5.4.17-2136.311.6.el7uek | [ELSA-2022-9828](https://patchblox.com/security/data/fix/linux/elsa-2022-9828.md) | Sep 22, 2022 | --- Data as of 2026-11-08T13:06:02Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.