RLSA-2026:56130

Synopsis

Important: sg3_utils security, bug fix, and enhancement update

Description

The sg3_utils packages provide command-line utilities for devices that use the Small Computer System Interface (SCSI) command sets.

Security Fix(es):

* sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export (CVE-2026-16313)

Bug Fix(es) and Enhancement(s):

* sg_inq output conformance for SCSI name string and ATA fields [rhel-8.10.z] (JIRA:Rocky Linux-188162)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 8 aarch64 Rocky Linux 8 x86_64

Fixes

2502845

CVEs

CVE-2026-16313

Affected packages

Rocky Linux 8 aarch64 - BaseOS

sg3_utils-0:1.44-6.el8_10.1.aarch64.rpm sg3_utils-0:1.44-6.el8_10.1.src.rpm sg3_utils-debuginfo-0:1.44-6.el8_10.1.aarch64.rpm sg3_utils-debugsource-0:1.44-6.el8_10.1.aarch64.rpm sg3_utils-libs-0:1.44-6.el8_10.1.aarch64.rpm sg3_utils-libs-debuginfo-0:1.44-6.el8_10.1.aarch64.rpm

Rocky Linux 8 x86_64 - BaseOS

sg3_utils-0:1.44-6.el8_10.1.src.rpm sg3_utils-0:1.44-6.el8_10.1.x86_64.rpm sg3_utils-debuginfo-0:1.44-6.el8_10.1.i686.rpm sg3_utils-debuginfo-0:1.44-6.el8_10.1.x86_64.rpm sg3_utils-debugsource-0:1.44-6.el8_10.1.i686.rpm sg3_utils-debugsource-0:1.44-6.el8_10.1.x86_64.rpm sg3_utils-libs-0:1.44-6.el8_10.1.i686.rpm sg3_utils-libs-0:1.44-6.el8_10.1.x86_64.rpm sg3_utils-libs-debuginfo-0:1.44-6.el8_10.1.i686.rpm sg3_utils-libs-debuginfo-0:1.44-6.el8_10.1.x86_64.rpm

Rocky Linux 8 aarch64 - PowerTools

sg3_utils-devel-0:1.44-6.el8_10.1.aarch64.rpm

Rocky Linux 8 x86_64 - PowerTools

sg3_utils-devel-0:1.44-6.el8_10.1.i686.rpm sg3_utils-devel-0:1.44-6.el8_10.1.x86_64.rpm