VDB

RHSA-2026:50142

RHSA-2026:50142 PUBLISHED CVSS 7.599999904632568 HIGH

A flaw was found in sg3_utils. The sg_inq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev device database. This could allow an attacker who can present a crafted SCSI device to execute arbitrary commands as root when the device is disconnected.

Risk Scores

CVSS 3.1
7.599999904632568
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Affected Products

VendorProductVersions
Red Hatsg3_utils-debuginfo-0:1.48-7.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)0:1.48-7.el10_2.1
Red Hatsg3_utils-libs-debuginfo-0:1.48-7.el10_2.1.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)0:1.48-7.el10_2.1
Red Hatsg3_utils-devel-0:1.48-7.el10_2.1.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)0:1.48-7.el10_2.1
Red Hatsg3_utils-0:1.48-7.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)0:1.48-7.el10_2.1
Red Hatsg3_utils-debuginfo-0:1.48-7.el10_2.1.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)0:1.48-7.el10_2.1
Red Hatsg3_utils-devel-0:1.48-7.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)0:1.48-7.el10_2.1
Red Hatsg3_utils-debuginfo-0:1.48-7.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)0:1.48-7.el10_2.1
Red Hatsg3_utils-libs-debuginfo-0:1.48-7.el10_2.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)0:1.48-7.el10_2.1
Red Hatsg3_utils-debugsource-0:1.48-7.el10_2.1.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)0:1.48-7.el10_2.1
Red Hatsg3_utils-libs-debuginfo-0:1.48-7.el10_2.1.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)0:1.48-7.el10_2.1
Red Hatsg3_utils-libs-debuginfo-0:1.48-7.el10_2.1.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)0:1.48-7.el10_2.1
Red Hatsg3_utils-0:1.48-7.el10_2.1.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)0:1.48-7.el10_2.1
Red Hatsg3_utils-0:1.48-7.el10_2.1.src as a component of Red Hat Enterprise Linux BaseOS (v. 10)0:1.48-7.el10_2.1
Red Hatsg3_utils-debuginfo-0:1.48-7.el10_2.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)0:1.48-7.el10_2.1
Red Hatsg3_utils-devel-0:1.48-7.el10_2.1.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)0:1.48-7.el10_2.1
Red Hatsg3_utils-debuginfo-0:1.48-7.el10_2.1.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)0:1.48-7.el10_2.1
Red Hatsg3_utils-devel-0:1.48-7.el10_2.1.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)0:1.48-7.el10_2.1
Red Hatsg3_utils-debugsource-0:1.48-7.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)0:1.48-7.el10_2.1
Red Hatsg3_utils-debugsource-0:1.48-7.el10_2.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)0:1.48-7.el10_2.1
Red Hatsg3_utils-debuginfo-0:1.48-7.el10_2.1.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)0:1.48-7.el10_2.1

…and 17 more

Timeline

  • Aug 4, 2026 CVE Published
  • Aug 18, 2026 CVE Updated
  • Aug 18, 2026 Distribution Patch
  • Aug 18, 2026 Distribution Patch
  • Aug 18, 2026 Security Advisory
  • Aug 18, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›