Linux Linux, SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 취약점
In the Linux kernel, the following vulnerability has been resolved: scsi: target: Reset t_task_cdb pointer in error case If allocation of cmd->t_task_cdb fails, it remains NULL but is later dereferenced in the 'err' path. In case of error, reset NULL t_task_cdb value to point at the default fixed-size buffer. Found by Linux Verification Center (linuxtesting.org) with SVACE.
In the Linux kernel, the following vulnerability has been resolved: scsi: target: Reset t_task_cdb pointer in error case If allocation of cmd->t_task_cdb fails, it remains NULL but is later dereferenced in the 'err' path. In case of error, reset NULL t_task_cdb value to point at the default fixed-size buffer. Found by Linux Verification Center (linuxtesting.org) with SVACE.
영향 제품·버전
제품 Linux Linux, SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
영향 버전 Linux Linux, SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP >= 9e95fb805dc043cc8ed878a08d1583e4097a5f80 < 6cac97b12bdab04832e0416d049efcd0d48d303b, >= 9e95fb805dc043cc8ed878a08d1583e4097a5f80 < 45fd86b444105c8bd07a763f58635c87e5dc7aea, >= 9e95fb805dc043cc8ed878a08d1583e4097a5f80 < 8727663ded659aad55eef21e3864ebf5a4796a96, >= 9e95fb805dc043cc8ed878a08d1583e4097a5f80 < 0260ad551b0815eb788d47f32899fbcd65d6f128, >= 9e95fb805dc043cc8ed878a08d1583e4097a5f80 < 0d36db68fdb8a3325386fd9523b67735f944e1f3, >= 9e95fb805dc043cc8ed878a08d1583e4097a5f80 < 8edbb9e371af186b4cf40819dab65fafe109df4d, >= 9e95fb805dc043cc8ed878a08d1583e4097a5f80 < 5053eab38a4c4543522d0c320c639c56a8b59908, >= 5.8, >= V3.1.6
수정 버전 Linux Linux, SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · 수정 버전은 공급사 공식자료 확인 필요
Linux Linux, SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP의 현재 전체 버전이 공식 영향 범위(Linux Linux, SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP >= 9e95fb805dc043cc8ed878a08d1583e4097a5f80 < 6cac97b12bdab04832e0416d049efcd0d48d303b, >= 9e95fb805dc043cc8ed878a08d1583e4097a5f80 < 45fd86b444105c8bd07a763f58635c87e5dc7aea, >= 9e95fb805dc043cc8ed878a08d1583e4097a5f80 < 8727663ded659aad55eef21e3864ebf5a4796a96, >= 9e95fb805dc043cc8ed878a08d1583e4097a5f80 < 0260ad551b0815eb788d47f32899fbcd65d6f128, >= 9e95fb805dc043cc8ed878a08d1583e4097a5f80 < 0d36db68fdb8a3325386fd9523b67735f944e1f3, >= 9e95fb805dc043cc8ed878a08d1583e4097a5f80 < 8edbb9e371af186b4cf40819dab65fafe109df4d, >= 9e95fb805dc043cc8ed878a08d1583e4097a5f80 < 5053eab38a4c4543522d0c320c639c56a8b59908, >= 5.8, >= V3.1.6)에 포함되는지 확인합니다. OS를 선택하면 해당 OS의 제품·패키지·KB·APAR 확인 명령만 표시됩니다.
조치방안
공급사 공식 보안 권고에서 영향 버전, 수정 버전, 패치 번호와 공식 완화조치를 먼저 확인해야 합니다.
조치 후 확인사항
패치 후 같은 명령으로 전체 버전을 다시 확인해 Linux Linux, SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · 수정 버전은 공급사 공식자료 확인 필요 기준을 충족하는지 확인합니다. 이어서 유형 미확정 관련 오류·공격 흔적이 새로 발생하지 않는지 확인합니다.