Linux Kernel SCSI MPI3MR Vulnerability in Memory Handling

A vulnerability in the Linux kernel's SCSI MPI3MR driver has been addressed. The issue, identified by the Kernel Address Sanitizer (KASAN), involved incorrect memory handling by writing an improper size of data. The vulnerability was present in the stable version of the Linux kernel.

Impact

The vulnerability could lead to memory corruption by allowing an incorrect amount of data to be written, potentially causing undefined behavior in the application.

Reproduction

The vulnerability can be reproduced by using the SCSI MPI3MR driver in the Linux kernel. The issue arises when the driver manages device ports, specifically related to enclosure handles, leading to an incorrect memory write operation.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. The specific commit addressing this issue is available in the Linux kernel stable tree.