ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord
CVE-2026-16313

Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export

CVSS 3.1 7.6 HIGHCheck source for fixed versionsKEV status unknown
Original advisory

cve-program · CVE-2026-16313

Published

A flaw was found in sg3_utils. The sg_inq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev device database. This could allow an attacker who can present a crafted SCSI device to execute arbitrary commands as root when the device is disconnected.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-16313

Published

sg3_utils

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 10",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "sg3_utils",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:1.48-7.el10_2.1",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/o:redhat:enterprise_linux:10.2"
                    ]
                }

sg3_utils

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "sg3_utils",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:1.48-7.el10_0.2",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/o:redhat:enterprise_linux_eus:10.0"
                    ]
                }

sg3_utils

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "sg3_utils",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1:1.37-20.el7_9",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/o:redhat:rhel_els:7"
                    ]
                }

sg3_utils

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "sg3_utils",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:1.44-6.el8_10.1",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:enterprise_linux:8::crb",
                        "cpe:/o:redhat:enterprise_linux:8::baseos"
                    ]
                }

sg3_utils

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "sg3_utils",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:1.44-5.el8_4.1",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/o:redhat:rhel_aus:8.4::baseos",
                        "cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"
                    ]
                }

sg3_utils

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "sg3_utils",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:1.44-5.el8_4.1",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/o:redhat:rhel_aus:8.4::baseos",
                        "cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"
                    ]
                }

sg3_utils

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "sg3_utils",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:1.44-5.el8_6.1",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/o:redhat:rhel_aus:8.6::baseos",
                        "cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"
                    ]
                }

sg3_utils

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "sg3_utils",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:1.44-5.el8_6.1",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/o:redhat:rhel_aus:8.6::baseos",
                        "cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"
                    ]
                }

sg3_utils

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "sg3_utils",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:1.44-6.el8_8.1",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/o:redhat:rhel_e4s:8.8::baseos",
                        "cpe:/o:redhat:rhel_tus:8.8::baseos"
                    ]
                }

sg3_utils

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "sg3_utils",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:1.44-6.el8_8.1",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/o:redhat:rhel_e4s:8.8::baseos",
                        "cpe:/o:redhat:rhel_tus:8.8::baseos"
                    ]
                }

sg3_utils

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 9",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "sg3_utils",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:1.47-10.el9_8.1",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:enterprise_linux:9::crb",
                        "cpe:/o:redhat:enterprise_linux:9::baseos"
                    ]
                }

sg3_utils

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "sg3_utils",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:1.47-9.el9_2.1",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/o:redhat:rhel_e4s:9.2::baseos"
                    ]
                }

sg3_utils

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "sg3_utils",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:1.47-9.el9_4.1",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/o:redhat:rhel_e4s:9.4::baseos"
                    ]
                }

sg3_utils

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "sg3_utils",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:1.47-10.el9_6.2",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhel_eus:9.6::crb",
                        "cpe:/o:redhat:rhel_eus:9.6::baseos"
                    ]
                }

openshift/ose-rhel-coreos-8

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Container Platform 4.12",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "openshift/ose-rhel-coreos-8",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "412.86.202609082051-0",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift:4.12::el8"
                    ]
                }

openshift/ose-rhel-coreos-9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Container Platform 4.13",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "openshift/ose-rhel-coreos-9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "413.92.202611041925-0",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift:4.13::el9"
                    ]
                }

openshift/ose-rhel-coreos-9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Container Platform 4.14",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "openshift/ose-rhel-coreos-9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "414.92.202611040941-0",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift:4.14::el9"
                    ]
                }

openshift/ose-rhel-coreos-9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Container Platform 4.15",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "openshift/ose-rhel-coreos-9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "415.92.202611051005-0",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift:4.15::el9"
                    ]
                }

openshift/ose-rhel-coreos-9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Container Platform 4.16",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "openshift/ose-rhel-coreos-9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "416.94.202609140240-0",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift:4.16::el9"
                    ]
                }

openshift/ose-rhel-coreos-9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Container Platform 4.17",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "openshift/ose-rhel-coreos-9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "417.94.202609191027-0",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift:4.17::el9"
                    ]
                }

openshift/ose-rhel-coreos-9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Container Platform 4.18",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "openshift/ose-rhel-coreos-9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "418.94.202609031320-0",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift:4.18::el9"
                    ]
                }

openshift/ose-rhel-coreos-9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Container Platform 4.19",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "openshift/ose-rhel-coreos-9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "4.19.9.6.202609021231-0",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift:4.19::el9"
                    ]
                }

openshift/ose-rhel-coreos-9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Container Platform 4.20",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "openshift/ose-rhel-coreos-9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "4.20.9.6.202609021029-0",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift:4.20::el9"
                    ]
                }

openshift/ose-rhel-coreos-9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Container Platform 4.21",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "openshift/ose-rhel-coreos-9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "4.21.9.6.202609021100-0",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift:4.21::el9"
                    ]
                }

openshift/ose-rhel-coreos-9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Container Platform 4.22",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "openshift/ose-rhel-coreos-9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "4.22.9.8.202608130832-0",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift:4.22::el9"
                    ]
                }

sg3_utils

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 6",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "sg3_utils",
                    "defaultStatus": "unaffected",
                    "cpes": [
                        "cpe:/o:redhat:rhel_els:6"
                    ]
                }

openshift/ose-rhel-coreos-9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Container Platform 5",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "openshift/ose-rhel-coreos-9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:openshift:5"
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 12 Nov 19:39 UTC · 274 of 275 readable · 272 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.