Threats tagged 'ghsa-fqh3-m8p8-gg7r'

A vulnerability in the Linux kernel's vhost-scsi component allows asynchronous command completions to write responses to unrelated userspace objects due to stale memory mappings after a memory table replacement. This issue occurs because vhost-scsi translates guest response descriptors into userspace iovecs, and the memory table can be replaced while commands are still in flight. The vulnerability has been resolved by flushing the vhost-scsi backend after device ioctl calls to wait for in-flight commands to complete before returning.