logo_clicknbuy.png

CVE-2024-57804 – Linux SCSIMPI3MR SAS Transport Sysfs Configuration Corruption

The following table lists the changes that have been made to the
CVE-2024-57804 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    Jan. 11, 2025

    Action Type Old Value New Value
    Added Description In the Linux kernel, the following vulnerability has been resolved:

    scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs

    The driver, through the SAS transport, exposes a sysfs interface to
    enable/disable PHYs in a controller/expander setup. When multiple PHYs
    are disabled and enabled in rapid succession, the persistent and current
    config pages related to SAS IO unit/SAS Expander pages could get
    corrupted.

    Use separate memory for each config request.
    Added Reference https://git.kernel.org/stable/c/711201a8b8334a397440ac0b859df0054e174bc9
    Added Reference https://git.kernel.org/stable/c/869fdc6f0606060301aef648231e186c7c542f5a
Share the Post:

Related Posts