It was discovered that the LIO SCSI target implementation in the Linux kernel performed insufficient identifier checking in certain XCOPY requests. An attacker with access to at least one LUN in a multiple backstore environment could use this to expose sensitive information or modify data.
5.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1036.39~18.04.15.4.0-1035.37~18.04.15.4.0-1009.10~18.04.15.4.0-1037.40~18.04.15.4.0-1028.31~18.04.15.4.0-1037.395.4.0-1039.415.4.0-1036.39