In the Linux kernel, the following vulnerability has been resolved:
scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
There is a potential out-of-bounds access when using test_bit() on a single word. The test_bit() and set_bit() functions operate on long values, and when testing or setting a single word, they can exceed the word boundary. KASAN detects this issue and produces a dump:
BUG: KASAN: slab-out-of-bounds in _scsih_add_device.constprop.0 (./arch/x86/include/asm/bitops.h:60 ./include/asm-generic/bitops/instrumented-atomic.h:29 drivers/scsi/mpt3sas/mpt3sas_scsih.c:7331) mpt3sas
Write of size 8 at addr ffff8881d26e3c60 by task kworker/u1536:2/2965
For full log, please look at [1].
Make the allocation at least the size of sizeof(unsigned long) so that set_bit() and test_bit() have sufficient room for read/write operations without overwriting unallocated memory.
[1] Link: https://lore.kernel.org/all/[email protected]/
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modulesUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-kvmUpgrade kernel-headersUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modules-extraUpgrade kernel-rt-develUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modulesUpgrade kernelUpgrade bpftoolUpgrade kernel-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernel-docUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-coreUpgrade kernel-modulesUpgrade perfUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-develUpgrade kernel-tools | Sep 26, 2024 | Jul 12, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.223-211.872Upgrade bpftoolUpgrade python-perfUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-develUpgrade perfUpgrade kernelUpgrade kernel-livepatch-4.14.352-267.564Upgrade kernel-debuginfo-common-aarch64 | Apr 10, 2025 | Jul 12, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade perfUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-livepatch-6.1.96-102.177Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-libbpf | Apr 15, 2025 | Jul 12, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 17, 2024 | Jul 12, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Oct 8, 2024 | Jul 12, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 9, 2024 | Jul 12, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libs | Nov 26, 2024 | Jul 12, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 8, 2024 | Jul 12, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jul 12, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Sep 25, 2024 | Jul 12, 2024 |
| Rocky_linux | — | Upgrade perf-debuginfoUpgrade perfUpgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade kernel-headersUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rtUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade kernel-cross-headersUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modulesUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-toolsUpgrade python3-perf | Oct 2, 2024 | Jul 12, 2024 |
| Suse | — | Upgrade reiserfs-kmp-rtUpgrade kernel-develUpgrade ocfs2-kmp-azureUpgrade kernel-macrosUpgrade kernel-default-vdsoUpgrade kernel-zfcpdumpUpgrade dlm-kmp-azureUpgrade dtb-lgUpgrade kernel-default-develUpgrade dtb-hisiliconUpgrade kernel-azure-extraUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-defaultUpgrade dtb-amdUpgrade dtb-amazonUpgrade kernel-debugUpgrade kernel-kvmsmallUpgrade dlm-kmp-64kbUpgrade kernel-default-baseUpgrade dtb-appleUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade dtb-xilinxUpgrade dtb-mediatekUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-docsUpgrade kernel-devel-rtUpgrade kernel-sourceUpgrade kernel-default-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-64kbUpgrade kernel-debug-develUpgrade dtb-apmUpgrade kernel-obs-qaUpgrade kernel-rt-livepatchUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade dtb-exynosUpgrade dtb-armUpgrade ocfs2-kmp-defaultUpgrade kernel-source-azureUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-symsUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-rtUpgrade dtb-allwinnerUpgrade dtb-renesasUpgrade dtb-freescaleUpgrade kernel-64kb-develUpgrade kernel-default-extraUpgrade kernel-rt-develUpgrade cluster-md-kmp-64kbUpgrade dtb-caviumUpgrade kernel-syms-azureUpgrade kernel-rt-optionalUpgrade kselftests-kmp-rtUpgrade kernel-default-base-rebuildUpgrade dtb-sprdUpgrade gfs2-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-default-livepatchUpgrade kernel-azure-vdsoUpgrade dtb-broadcomUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-vdsoUpgrade dtb-marvellUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-default-manUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade kernel-source-rtUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade dtb-amlogicUpgrade dtb-socionextUpgrade kselftests-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade dtb-qcomUpgrade kernel-azure-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade kernel-rtUpgrade kernel-defaultUpgrade kernel-azure-baseUpgrade kernel-azureUpgrade kernel-rt-extraUpgrade kernel-rt_debug-livepatch-devel | Aug 8, 2024 | Jul 12, 2024 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1079-ibmUpgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1069-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-azureUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1043-iotUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-5.4.0-1131-oracleUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-4.15.0-230-genericUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-1092-bluefieldUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-44-genericUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gke-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-ibmUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-oem-22.04aUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1157-kvmUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oemUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1120-kvmUpgrade linux-image-raspiUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-4.15.0-1182-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-4.15.0-1167-gcpUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1174-awsUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-gkeopUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-230-lowlatencyUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1116-raspiUpgrade linux-image-genericUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-intelUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-5.4.0-195-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi2Upgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1136-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-1051-xilinx-zynqmpUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-5.4.0-1137-azureUpgrade linux-image-5.4.0-195-generic-lpaeUpgrade linux-image-5.4.0-1132-awsUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-4.15.0-1136-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-5.4.0-195-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-azure-lts-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1099-gkeopUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-azure-cvmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-121-generic-lpae | Sep 12, 2024 | Jul 12, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jul 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub