Skip to content
Threat Feed
Subscribe

Product

Sg3_utils

1 brief RSS
high advisory

CVE-2026-16313: sg3_utils Vulnerability Allows Root Command Execution via Crafted SCSI Device

A vulnerability, CVE-2026-16313, exists in the `sg_inq` command of `sg3_utils` on Red Hat Enterprise Linux systems, allowing an attacker who can present a specially crafted SCSI device to inject arbitrary properties into the `udev` device database by embedding a newline character in the device's name string, leading to arbitrary command execution as root when the device is disconnected.

sg3_utils linux vulnerability privilege-escalation arbitrary-command-execution
2t 1c 3i