Threats tagged 'ghsa-p98p-xmcg-j23c'

A vulnerability in the Linux kernel's scsi xen/scsifront driver allows a malicious or buggy backend to cause a guest crash by sending a backend response with an in-range rqid that does not correspond to an outstanding request. This leads to a NULL pointer dereference due to missing checks on shadow entries before dereferencing.