Linux Kernel SCSI Warning Log Ratelimit Denial-of-Service Vulnerability

A denial-of-service vulnerability has been addressed in the Linux kernel's SCSI subsystem for the storvsc driver. This issue arose because persistent errors from the hypervisor could flood the kernel log with SCSI warnings about failed I/O. This log flooding could max out CPU utilization, hindering troubleshooting efforts from the virtual machine side. The vulnerability has been mitigated by implementing a ratelimit on the warning logs, preventing them from overwhelming the VM.

Impact

Excessive SCSI warning logs could flood the kernel log, maxing out CPU utilization and causing a denial-of-service condition on the virtual machine.