Linux Kernel SCSI MPI3MR Driver Bitmap Size Management Vulnerability

A vulnerability in the Linux kernel's SCSI MPI3MR driver allows for out-of-bounds memory access during firmware downloads to the eHBA-9600. This issue arises because the driver calculates bitmap sizes in bytes, while the corresponding helper functions expect sizes in bits. The discrepancy leads to memory access violations, causing a 'slab-out-of-bounds' error. The vulnerability has been addressed by revising the bitmap size management to use bits instead of bytes, and by updating the related memory allocation and handling functions accordingly.

Impact

The vulnerability could be exploited to cause a 'slab-out-of-bounds' memory access error, potentially leading to memory corruption.

Remediation

Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.