Synopsis
Important: sg3_utils security, bug fix, and enhancement update
Type/Severity
Security Advisory: Important
Red Hat Lightspeed patch analysis
Identify and remediate systems affected by this advisory.
View affected systems
Topic
An update for sg3_utils is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Description
The sg3_utils packages provide command-line utilities for devices that use the Small Computer System Interface (SCSI) command sets.
Security Fix(es):
- sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export (CVE-2026-16313)
Bug Fix(es) and Enhancement(s):
- sg_inq output conformance for SCSI name string and ATA fields [rhel-10.0.z] (JIRA:RHEL-188122)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Products
-
Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64
-
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x
-
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le
-
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64
-
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 x86_64
-
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 ppc64le
-
Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 s390x
-
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 aarch64
-
Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64
-
Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x
-
Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le
-
Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64
Fixes
-
BZ - 2502845
- CVE-2026-16313 sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export
Note:
More recent versions of these packages may be available.
Click a package name for more details.
Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0
| SRPM |
|
sg3_utils-1.48-7.el10_0.2.src.rpm
|
SHA-256: ae1f119da0441c80c96905f0da56142f60be01acee1fadf006ea33265cb146fb |
| x86_64 |
|
sg3_utils-1.48-7.el10_0.2.x86_64.rpm
|
SHA-256: 251ca440f654447a00dc581dafb5dd6cc25826b0d141d20ed84bcb5be57343a1 |
|
sg3_utils-debuginfo-1.48-7.el10_0.2.x86_64.rpm
|
SHA-256: 44e879644e90b344d2cf121b8cdfc1814f5266c7e1fc85cc737171436c232c44 |
|
sg3_utils-debugsource-1.48-7.el10_0.2.x86_64.rpm
|
SHA-256: f503efbd65882e1e32955584a7152ec99abe80ac693019a597f269815eaff2ff |
|
sg3_utils-libs-1.48-7.el10_0.2.x86_64.rpm
|
SHA-256: 216d5fc3f758bd70086ef199f89873455343ce10b2626f17796ebf2c86899400 |
|
sg3_utils-libs-debuginfo-1.48-7.el10_0.2.x86_64.rpm
|
SHA-256: 23dc6d794b8714fb5eb38541b64e63fa92485370912c7827c105cae488d8c6b2 |
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0
| SRPM |
|
sg3_utils-1.48-7.el10_0.2.src.rpm
|
SHA-256: ae1f119da0441c80c96905f0da56142f60be01acee1fadf006ea33265cb146fb |
| s390x |
|
sg3_utils-1.48-7.el10_0.2.s390x.rpm
|
SHA-256: af6c386d649cf2c4e0436ad93d035a71bbecea989d4614e47fd5fc7f2a29f3a5 |
|
sg3_utils-debuginfo-1.48-7.el10_0.2.s390x.rpm
|
SHA-256: be49e163ea0257eaecc6058983c9a61205b1adf6ca40877dd3c98010284b6074 |
|
sg3_utils-debugsource-1.48-7.el10_0.2.s390x.rpm
|
SHA-256: 62fe0962b90621f3a2a0045b1e11a1f526582f172b51bcc83bff96b79a7c61ce |
|
sg3_utils-libs-1.48-7.el10_0.2.s390x.rpm
|
SHA-256: 5efa0b85788aaaf14d88d6745a3f294e8b1d313e9fc8b1afae4d5d7d9bbb288f |
|
sg3_utils-libs-debuginfo-1.48-7.el10_0.2.s390x.rpm
|
SHA-256: 42d14ac6341fa8ef94bb62c47b568e98ed518f2b7642f1c8ffc1b3a7f68107b5 |
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0
| SRPM |
|
sg3_utils-1.48-7.el10_0.2.src.rpm
|
SHA-256: ae1f119da0441c80c96905f0da56142f60be01acee1fadf006ea33265cb146fb |
| ppc64le |
|
sg3_utils-1.48-7.el10_0.2.ppc64le.rpm
|
SHA-256: 6b6ec545724879e72737a979442763d49616f51e724eda9dcb45518615a9f4a4 |
|
sg3_utils-debuginfo-1.48-7.el10_0.2.ppc64le.rpm
|
SHA-256: cdc8e59fc77f163cdf4791cf37efdf19a6093dbb4d51fcac29153dd36b74be3c |
|
sg3_utils-debugsource-1.48-7.el10_0.2.ppc64le.rpm
|
SHA-256: 81e9d7e95ef1d545a0c2822263be8ec355f76a2f33615e567a8d5c8e82a139eb |
|
sg3_utils-libs-1.48-7.el10_0.2.ppc64le.rpm
|
SHA-256: f89f6778444a785e40e528eb36ddde60533e221cf94d908640550d3040b91a54 |
|
sg3_utils-libs-debuginfo-1.48-7.el10_0.2.ppc64le.rpm
|
SHA-256: a6897cedc36df26f8e2e37ed0b018a61ef7bae8f256688856e0d504f8f7e0c94 |
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0
| SRPM |
|
sg3_utils-1.48-7.el10_0.2.src.rpm
|
SHA-256: ae1f119da0441c80c96905f0da56142f60be01acee1fadf006ea33265cb146fb |
| aarch64 |
|
sg3_utils-1.48-7.el10_0.2.aarch64.rpm
|
SHA-256: cfdb7abd7538295a1a3a6f11d1fa298fb96cac38a31be3a127fc084468043a1e |
|
sg3_utils-debuginfo-1.48-7.el10_0.2.aarch64.rpm
|
SHA-256: 168b264107d1c1ab717090abd6bdd27ebe245162b3ecebf6cfe9e6038d2a9811 |
|
sg3_utils-debugsource-1.48-7.el10_0.2.aarch64.rpm
|
SHA-256: baba28366372950f7329d90f1867ef166874519c377fd74a5b14a4feb42e6f2c |
|
sg3_utils-libs-1.48-7.el10_0.2.aarch64.rpm
|
SHA-256: 21471870e804f50db12f52529910f7ffdb28ab83348f2c04ae16b40887ebe531 |
|
sg3_utils-libs-debuginfo-1.48-7.el10_0.2.aarch64.rpm
|
SHA-256: 035c8cd34e01cfd15ad0260290e8837cfe74dcee408f747c8c20b4f5d72cf017 |
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0
| SRPM |
| x86_64 |
|
sg3_utils-debuginfo-1.48-7.el10_0.2.x86_64.rpm
|
SHA-256: 44e879644e90b344d2cf121b8cdfc1814f5266c7e1fc85cc737171436c232c44 |
|
sg3_utils-debugsource-1.48-7.el10_0.2.x86_64.rpm
|
SHA-256: f503efbd65882e1e32955584a7152ec99abe80ac693019a597f269815eaff2ff |
|
sg3_utils-devel-1.48-7.el10_0.2.x86_64.rpm
|
SHA-256: 805ffe32f37fbef57b40d7e5c6fb2fa246fa01bdef1350fe1beabc8754d86051 |
|
sg3_utils-libs-debuginfo-1.48-7.el10_0.2.x86_64.rpm
|
SHA-256: 23dc6d794b8714fb5eb38541b64e63fa92485370912c7827c105cae488d8c6b2 |
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0
| SRPM |
| ppc64le |
|
sg3_utils-debuginfo-1.48-7.el10_0.2.ppc64le.rpm
|
SHA-256: cdc8e59fc77f163cdf4791cf37efdf19a6093dbb4d51fcac29153dd36b74be3c |
|
sg3_utils-debugsource-1.48-7.el10_0.2.ppc64le.rpm
|
SHA-256: 81e9d7e95ef1d545a0c2822263be8ec355f76a2f33615e567a8d5c8e82a139eb |
|
sg3_utils-devel-1.48-7.el10_0.2.ppc64le.rpm
|
SHA-256: 7c5dbbf1f7ad45cd215b712811a518864116f48cf3f9582a80ecf000b401e4d1 |
|
sg3_utils-libs-debuginfo-1.48-7.el10_0.2.ppc64le.rpm
|
SHA-256: a6897cedc36df26f8e2e37ed0b018a61ef7bae8f256688856e0d504f8f7e0c94 |
Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0
| SRPM |
| s390x |
|
sg3_utils-debuginfo-1.48-7.el10_0.2.s390x.rpm
|
SHA-256: be49e163ea0257eaecc6058983c9a61205b1adf6ca40877dd3c98010284b6074 |
|
sg3_utils-debugsource-1.48-7.el10_0.2.s390x.rpm
|
SHA-256: 62fe0962b90621f3a2a0045b1e11a1f526582f172b51bcc83bff96b79a7c61ce |
|
sg3_utils-devel-1.48-7.el10_0.2.s390x.rpm
|
SHA-256: efffc656318c8460a7cf6454cc555c61688309b380ac897fbbfbfd93d3b2eed6 |
|
sg3_utils-libs-debuginfo-1.48-7.el10_0.2.s390x.rpm
|
SHA-256: 42d14ac6341fa8ef94bb62c47b568e98ed518f2b7642f1c8ffc1b3a7f68107b5 |
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0
| SRPM |
| aarch64 |
|
sg3_utils-debuginfo-1.48-7.el10_0.2.aarch64.rpm
|
SHA-256: 168b264107d1c1ab717090abd6bdd27ebe245162b3ecebf6cfe9e6038d2a9811 |
|
sg3_utils-debugsource-1.48-7.el10_0.2.aarch64.rpm
|
SHA-256: baba28366372950f7329d90f1867ef166874519c377fd74a5b14a4feb42e6f2c |
|
sg3_utils-devel-1.48-7.el10_0.2.aarch64.rpm
|
SHA-256: 744b39a6c8aa01605633d278fab51745d954a752255d883203e38bbdfbe1cd36 |
|
sg3_utils-libs-debuginfo-1.48-7.el10_0.2.aarch64.rpm
|
SHA-256: 035c8cd34e01cfd15ad0260290e8837cfe74dcee408f747c8c20b4f5d72cf017 |
Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0
| SRPM |
|
sg3_utils-1.48-7.el10_0.2.src.rpm
|
SHA-256: ae1f119da0441c80c96905f0da56142f60be01acee1fadf006ea33265cb146fb |
| aarch64 |
|
sg3_utils-1.48-7.el10_0.2.aarch64.rpm
|
SHA-256: cfdb7abd7538295a1a3a6f11d1fa298fb96cac38a31be3a127fc084468043a1e |
|
sg3_utils-debuginfo-1.48-7.el10_0.2.aarch64.rpm
|
SHA-256: 168b264107d1c1ab717090abd6bdd27ebe245162b3ecebf6cfe9e6038d2a9811 |
|
sg3_utils-debugsource-1.48-7.el10_0.2.aarch64.rpm
|
SHA-256: baba28366372950f7329d90f1867ef166874519c377fd74a5b14a4feb42e6f2c |
|
sg3_utils-libs-1.48-7.el10_0.2.aarch64.rpm
|
SHA-256: 21471870e804f50db12f52529910f7ffdb28ab83348f2c04ae16b40887ebe531 |
|
sg3_utils-libs-debuginfo-1.48-7.el10_0.2.aarch64.rpm
|
SHA-256: 035c8cd34e01cfd15ad0260290e8837cfe74dcee408f747c8c20b4f5d72cf017 |
Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0
| SRPM |
|
sg3_utils-1.48-7.el10_0.2.src.rpm
|
SHA-256: ae1f119da0441c80c96905f0da56142f60be01acee1fadf006ea33265cb146fb |
| s390x |
|
sg3_utils-1.48-7.el10_0.2.s390x.rpm
|
SHA-256: af6c386d649cf2c4e0436ad93d035a71bbecea989d4614e47fd5fc7f2a29f3a5 |
|
sg3_utils-debuginfo-1.48-7.el10_0.2.s390x.rpm
|
SHA-256: be49e163ea0257eaecc6058983c9a61205b1adf6ca40877dd3c98010284b6074 |
|
sg3_utils-debugsource-1.48-7.el10_0.2.s390x.rpm
|
SHA-256: 62fe0962b90621f3a2a0045b1e11a1f526582f172b51bcc83bff96b79a7c61ce |
|
sg3_utils-libs-1.48-7.el10_0.2.s390x.rpm
|
SHA-256: 5efa0b85788aaaf14d88d6745a3f294e8b1d313e9fc8b1afae4d5d7d9bbb288f |
|
sg3_utils-libs-debuginfo-1.48-7.el10_0.2.s390x.rpm
|
SHA-256: 42d14ac6341fa8ef94bb62c47b568e98ed518f2b7642f1c8ffc1b3a7f68107b5 |
Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0
| SRPM |
|
sg3_utils-1.48-7.el10_0.2.src.rpm
|
SHA-256: ae1f119da0441c80c96905f0da56142f60be01acee1fadf006ea33265cb146fb |
| ppc64le |
|
sg3_utils-1.48-7.el10_0.2.ppc64le.rpm
|
SHA-256: 6b6ec545724879e72737a979442763d49616f51e724eda9dcb45518615a9f4a4 |
|
sg3_utils-debuginfo-1.48-7.el10_0.2.ppc64le.rpm
|
SHA-256: cdc8e59fc77f163cdf4791cf37efdf19a6093dbb4d51fcac29153dd36b74be3c |
|
sg3_utils-debugsource-1.48-7.el10_0.2.ppc64le.rpm
|
SHA-256: 81e9d7e95ef1d545a0c2822263be8ec355f76a2f33615e567a8d5c8e82a139eb |
|
sg3_utils-libs-1.48-7.el10_0.2.ppc64le.rpm
|
SHA-256: f89f6778444a785e40e528eb36ddde60533e221cf94d908640550d3040b91a54 |
|
sg3_utils-libs-debuginfo-1.48-7.el10_0.2.ppc64le.rpm
|
SHA-256: a6897cedc36df26f8e2e37ed0b018a61ef7bae8f256688856e0d504f8f7e0c94 |
Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0
| SRPM |
|
sg3_utils-1.48-7.el10_0.2.src.rpm
|
SHA-256: ae1f119da0441c80c96905f0da56142f60be01acee1fadf006ea33265cb146fb |
| x86_64 |
|
sg3_utils-1.48-7.el10_0.2.x86_64.rpm
|
SHA-256: 251ca440f654447a00dc581dafb5dd6cc25826b0d141d20ed84bcb5be57343a1 |
|
sg3_utils-debuginfo-1.48-7.el10_0.2.x86_64.rpm
|
SHA-256: 44e879644e90b344d2cf121b8cdfc1814f5266c7e1fc85cc737171436c232c44 |
|
sg3_utils-debugsource-1.48-7.el10_0.2.x86_64.rpm
|
SHA-256: f503efbd65882e1e32955584a7152ec99abe80ac693019a597f269815eaff2ff |
|
sg3_utils-libs-1.48-7.el10_0.2.x86_64.rpm
|
SHA-256: 216d5fc3f758bd70086ef199f89873455343ce10b2626f17796ebf2c86899400 |
|
sg3_utils-libs-debuginfo-1.48-7.el10_0.2.x86_64.rpm
|
SHA-256: 23dc6d794b8714fb5eb38541b64e63fa92485370912c7827c105cae488d8c6b2 |