Linux Kernel ARPMB Command Handling Vulnerability in UFS SCSI Core BSG

A denial-of-service vulnerability has been identified in the Linux kernel's handling of the ARPMB command within the UFS SCSI core BSG module. When the UFS BSG execution of advanced ARPMB requests fails, the kernel crashes by improperly copying user data, leading to a memory management error. This issue arises because the device's lack of support for the ARPMB command is not properly handled, causing a crash instead of a graceful error response.

Impact

Exploitation of this vulnerability leads to a kernel crash, causing a denial-of-service condition on the affected system.