OESA-2026-3244

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-3244
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2026-3244.json
JSON Data
https://api.osv.dev/v1/vulns/OESA-2026-3244
Upstream
  • CVE-2026-16313
Published
2026-08-07T02:41:42Z
Modified
2026-08-07T03:00:54.101830414Z
Severity
  • 7.6 (High) CVSS_V3 - CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS Calculator
Summary
sg3_utils security update
Details

The sg3_utils package contains utilities that send SCSI commands to devices. As well as devices on transports traditionally associated with SCSI (e.g. Fibre Channel (FCP), Serial Attached SCSI (SAS) and the SCSI Parallel Interface(SPI)) many other devices use SCSI command sets. ATAPI cd/dvd drives and SATA disks that connect via a translation layer or a bridge device are examples of devices that use SCSI command sets.

Security Fix(es):

A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev device database. This could allow an attacker who can present a crafted SCSI device to execute arbitrary commands as root when the device is disconnected.(CVE-2026-16313)

Database specific 
{
    "severity": "High"
}
References

Affected packages

openEuler:20.03-LTS-SP4
sg3_utils

Package

Name
sg3_utils
Purl
pkg:rpm/openEuler/sg3_utils&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.45-14.oe2003sp4

Ecosystem specific 

{
    "x86_64": [
        "sg3_utils-1.45-14.oe2003sp4.x86_64.rpm",
        "sg3_utils-debuginfo-1.45-14.oe2003sp4.x86_64.rpm",
        "sg3_utils-debugsource-1.45-14.oe2003sp4.x86_64.rpm",
        "sg3_utils-devel-1.45-14.oe2003sp4.x86_64.rpm",
        "sg3_utils-help-1.45-14.oe2003sp4.x86_64.rpm"
    ],
    "aarch64": [
        "sg3_utils-1.45-14.oe2003sp4.aarch64.rpm",
        "sg3_utils-debuginfo-1.45-14.oe2003sp4.aarch64.rpm",
        "sg3_utils-debugsource-1.45-14.oe2003sp4.aarch64.rpm",
        "sg3_utils-devel-1.45-14.oe2003sp4.aarch64.rpm",
        "sg3_utils-help-1.45-14.oe2003sp4.aarch64.rpm"
    ],
    "src": [
        "sg3_utils-1.45-14.oe2003sp4.src.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3244.json"
openEuler:22.03-LTS-SP4
sg3_utils

Package

Name
sg3_utils
Purl
pkg:rpm/openEuler/sg3_utils&distro=openEuler-22.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.46-10.oe2203sp4

Ecosystem specific 

{
    "x86_64": [
        "sg3_utils-1.46-10.oe2203sp4.x86_64.rpm",
        "sg3_utils-debuginfo-1.46-10.oe2203sp4.x86_64.rpm",
        "sg3_utils-debugsource-1.46-10.oe2203sp4.x86_64.rpm",
        "sg3_utils-devel-1.46-10.oe2203sp4.x86_64.rpm",
        "sg3_utils-help-1.46-10.oe2203sp4.x86_64.rpm"
    ],
    "aarch64": [
        "sg3_utils-1.46-10.oe2203sp4.aarch64.rpm",
        "sg3_utils-debuginfo-1.46-10.oe2203sp4.aarch64.rpm",
        "sg3_utils-debugsource-1.46-10.oe2203sp4.aarch64.rpm",
        "sg3_utils-devel-1.46-10.oe2203sp4.aarch64.rpm",
        "sg3_utils-help-1.46-10.oe2203sp4.aarch64.rpm"
    ],
    "src": [
        "sg3_utils-1.46-10.oe2203sp4.src.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3244.json"
openEuler:24.03-LTS-SP1
sg3_utils

Package

Name
sg3_utils
Purl
pkg:rpm/openEuler/sg3_utils&distro=openEuler-24.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.48-4.oe2403sp1

Ecosystem specific 

{
    "x86_64": [
        "sg3_utils-1.48-4.oe2403sp1.x86_64.rpm",
        "sg3_utils-debuginfo-1.48-4.oe2403sp1.x86_64.rpm",
        "sg3_utils-debugsource-1.48-4.oe2403sp1.x86_64.rpm",
        "sg3_utils-devel-1.48-4.oe2403sp1.x86_64.rpm",
        "sg3_utils-help-1.48-4.oe2403sp1.x86_64.rpm"
    ],
    "aarch64": [
        "sg3_utils-1.48-4.oe2403sp1.aarch64.rpm",
        "sg3_utils-debuginfo-1.48-4.oe2403sp1.aarch64.rpm",
        "sg3_utils-debugsource-1.48-4.oe2403sp1.aarch64.rpm",
        "sg3_utils-devel-1.48-4.oe2403sp1.aarch64.rpm",
        "sg3_utils-help-1.48-4.oe2403sp1.aarch64.rpm"
    ],
    "src": [
        "sg3_utils-1.48-4.oe2403sp1.src.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3244.json"
openEuler:24.03-LTS-SP3
sg3_utils

Package

Name
sg3_utils
Purl
pkg:rpm/openEuler/sg3_utils&distro=openEuler-24.03-LTS-SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.48-4.oe2403sp3

Ecosystem specific 

{
    "x86_64": [
        "sg3_utils-1.48-4.oe2403sp3.x86_64.rpm",
        "sg3_utils-debuginfo-1.48-4.oe2403sp3.x86_64.rpm",
        "sg3_utils-debugsource-1.48-4.oe2403sp3.x86_64.rpm",
        "sg3_utils-devel-1.48-4.oe2403sp3.x86_64.rpm",
        "sg3_utils-help-1.48-4.oe2403sp3.x86_64.rpm"
    ],
    "aarch64": [
        "sg3_utils-1.48-4.oe2403sp3.aarch64.rpm",
        "sg3_utils-debuginfo-1.48-4.oe2403sp3.aarch64.rpm",
        "sg3_utils-debugsource-1.48-4.oe2403sp3.aarch64.rpm",
        "sg3_utils-devel-1.48-4.oe2403sp3.aarch64.rpm",
        "sg3_utils-help-1.48-4.oe2403sp3.aarch64.rpm"
    ],
    "src": [
        "sg3_utils-1.48-4.oe2403sp3.src.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3244.json"
openEuler:24.03-LTS-SP4
sg3_utils

Package

Name
sg3_utils
Purl
pkg:rpm/openEuler/sg3_utils&distro=openEuler-24.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.48-4.oe2403sp4

Ecosystem specific 

{
    "x86_64": [
        "sg3_utils-1.48-4.oe2403sp4.x86_64.rpm",
        "sg3_utils-debuginfo-1.48-4.oe2403sp4.x86_64.rpm",
        "sg3_utils-debugsource-1.48-4.oe2403sp4.x86_64.rpm",
        "sg3_utils-devel-1.48-4.oe2403sp4.x86_64.rpm",
        "sg3_utils-help-1.48-4.oe2403sp4.x86_64.rpm"
    ],
    "aarch64": [
        "sg3_utils-1.48-4.oe2403sp4.aarch64.rpm",
        "sg3_utils-debuginfo-1.48-4.oe2403sp4.aarch64.rpm",
        "sg3_utils-debugsource-1.48-4.oe2403sp4.aarch64.rpm",
        "sg3_utils-devel-1.48-4.oe2403sp4.aarch64.rpm",
        "sg3_utils-help-1.48-4.oe2403sp4.aarch64.rpm"
    ],
    "src": [
        "sg3_utils-1.48-4.oe2403sp4.src.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3244.json"