carnil> Introduced in 1526d9f10c61 ("scsi: target: Make state_list per CPU").
carnil> Vulnerable versions: 5.10.180 5.11-rc1.
carnil> Technically N/A for sid branch as no released version in unstable
carnil> was ever affected. But the issue was backported in the 5.10.y series.
carnil> As wokraround for the security-tracker import mark the unstable
carnil> 5.14.6-1 as the fixed one.
| Branch | Status |
|---|---|
| 4.19-buster-security | N/A "Vulnerable code not present" |
| 4.19-upstream-stable | N/A "Vulnerable code not present" |
| 5.10-bullseye-security | needed |
| 5.10-upstream-stable | needed |
| 6.1-bookworm-security | N/A "Fixed before branching point" |
| 6.1-upstream-stable | N/A "Fixed before branching point" |
| 6.6-upstream-stable | N/A "Fixed before branching point" |
| 6.8-upstream-stable | N/A "Fixed before branching point" |
| sid | released (5.14.6-1) |
| upstream | released (5.13-rc4) [70ca3c57ff914113f681e657634f7fbfa68e1ad1] |