In the Linux kernel, the following vulnerability has been resolved:
scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
There is a potential out-of-bounds access when using test_bit() on a single word. The test_bit() and set_bit() functions operate on long values, and when testing or setting a single word, they can exceed the word boundary. KASAN detects this issue and produces a dump:
BUG: KASAN: slab-out-of-bounds in _scsih_add_device.constprop.0 (./arch/x86/include/asm/bitops.h:60 ./include/asm-generic/bitops/instrumented-atomic.h:29 drivers/scsi/mpt3sas/mpt3sas_scsih.c:7331) mpt3sas
Write of size 8 at addr ffff8881d26e3c60 by task kworker/u1536:2/2965
For full log, please look at [1].
Make the allocation at least the size of sizeof(unsigned long) so that set_bit() and test_bit() have sufficient room for read/write operations without overwriting unallocated memory.
[1] Link: https://lore.kernel.org/all/[email protected]/
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-cross-headersUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-debug-coreUpgrade kernelUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modulesUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-rt-debugUpgrade kernel-debugUpgrade kernel-debug-modules-extraUpgrade kernel-rtUpgrade kernel-rt-coreUpgrade kernel-docUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modulesUpgrade kernel-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade perfUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade kernel-modulesUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extra | Sep 26, 2024 | Jul 12, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.352-267.564Upgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernelUpgrade kernel-headersUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.223-211.872Upgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfo | Apr 10, 2025 | Jul 12, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.96-102.177Upgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade perfUpgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64 | Apr 15, 2025 | Jul 12, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 17, 2024 | Jul 12, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | Jul 12, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade python3-perf | Oct 9, 2024 | Jul 12, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Nov 26, 2024 | Jul 12, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 8, 2024 | Jul 12, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jul 12, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Sep 25, 2024 | Jul 12, 2024 |
| Rocky_linux | — | Upgrade kernel-rtUpgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade kernel-debug-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-tools-libs-develUpgrade bpftoolUpgrade kernelUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-rt-debug-develUpgrade kernel-debug-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-modulesUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-rt-debug-kvm | Oct 2, 2024 | Jul 12, 2024 |
| Suse | — | Upgrade dtb-allwinnerUpgrade dtb-freescaleUpgrade cluster-md-kmp-defaultUpgrade dtb-renesasUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-default-extraUpgrade kernel-rt-develUpgrade kernel-symsUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-default-develUpgrade kernel-source-azureUpgrade dtb-lgUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-rt-livepatchUpgrade dtb-apmUpgrade gfs2-kmp-64kbUpgrade kernel-obs-qaUpgrade dtb-mediatekUpgrade dlm-kmp-azureUpgrade kernel-default-baseUpgrade kselftests-kmp-64kbUpgrade dtb-armUpgrade dlm-kmp-defaultUpgrade dtb-amazonUpgrade kernel-docsUpgrade dtb-exynosUpgrade dtb-hisiliconUpgrade kernel-azure-extraUpgrade dlm-kmp-64kbUpgrade dtb-amdUpgrade kernel-default-livepatch-develUpgrade dtb-xilinxUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-sourceUpgrade kernel-default-optionalUpgrade kernel-debugUpgrade kernel-64kb-livepatch-develUpgrade kernel-debug-develUpgrade kernel-64kbUpgrade kernel-devel-rtUpgrade dtb-appleUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade kernel-develUpgrade kernel-macrosUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-source-rtUpgrade dtb-amlogicUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade kernel-rt-optionalUpgrade kernel-rt-extraUpgrade kernel-default-base-rebuildUpgrade kernel-azure-baseUpgrade kernel-rt_debug-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-rt_debug-develUpgrade dtb-marvellUpgrade dtb-caviumUpgrade reiserfs-kmp-64kbUpgrade kernel-source-vanillaUpgrade dtb-socionextUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade dtb-qcomUpgrade gfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-syms-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-rtUpgrade dtb-sprdUpgrade kernel-rt_debugUpgrade kernel-default-livepatchUpgrade kernel-azure-vdsoUpgrade dtb-alteraUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade kernel-default-manUpgrade kernel-azure-optionalUpgrade kernel-azure-develUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade kernel-default | Aug 8, 2024 | Jul 12, 2024 |
| Ubuntu | — | Upgrade linux-image-aws-hweUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidiaUpgrade linux-image-5.4.0-1120-kvmUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1092-bluefieldUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-6.8.0-1012-oemUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-azureUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-5.4.0-1131-oracleUpgrade linux-image-oemUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-aws-lts-20.04Upgrade linux-image-ibmUpgrade linux-image-gke-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-oem-20.04bUpgrade linux-image-kvmUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-4.15.0-1157-kvmUpgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-oem-22.04Upgrade linux-image-5.4.0-1079-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-raspiUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-aws-lts-18.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-4.15.0-230-genericUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04dUpgrade linux-image-5.4.0-1043-iotUpgrade linux-image-genericUpgrade linux-image-azure-lts-18.04Upgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-gkeUpgrade linux-image-5.4.0-195-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1099-gkeopUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-azure-cvmUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-4.15.0-1174-awsUpgrade linux-image-4.15.0-230-lowlatencyUpgrade linux-image-5.4.0-1116-raspiUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-oem-20.04dUpgrade linux-image-4.15.0-1136-oracleUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1014-azureUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-195-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-intelUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-4.15.0-1167-gcpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-4.15.0-1182-azureUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspi2Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1136-gcpUpgrade linux-image-5.4.0-1132-awsUpgrade linux-image-bluefieldUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-osp1Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-5.4.0-1137-azureUpgrade linux-image-5.4.0-1051-xilinx-zynqmpUpgrade linux-image-gcpUpgrade linux-image-5.4.0-195-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-virtual-hwe-16.04 | Sep 12, 2024 | Jul 12, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jul 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub