In the Linux kernel, the following vulnerability has been resolved:
scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
There is a potential out-of-bounds access when using test_bit() on a single word. The test_bit() and set_bit() functions operate on long values, and when testing or setting a single word, they can exceed the word boundary. KASAN detects this issue and produces a dump:
BUG: KASAN: slab-out-of-bounds in _scsih_add_device.constprop.0 (./arch/x86/include/asm/bitops.h:60 ./include/asm-generic/bitops/instrumented-atomic.h:29 drivers/scsi/mpt3sas/mpt3sas_scsih.c:7331) mpt3sas
Write of size 8 at addr ffff8881d26e3c60 by task kworker/u1536:2/2965
For full log, please look at [1].
Make the allocation at least the size of sizeof(unsigned long) so that set_bit() and test_bit() have sufficient room for read/write operations without overwriting unallocated memory.
[1] Link: https://lore.kernel.org/all/[email protected]/
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-rt-debugUpgrade kernel-headersUpgrade kernel-rt-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-debug-coreUpgrade bpftoolUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modules-extraUpgrade kernel-coreUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade perfUpgrade kernel-zfcpdump-develUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-docUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-develUpgrade kernel-develUpgrade kernel-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-extra | Sep 26, 2024 | Jul 12, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.223-211.872Upgrade python-perfUpgrade bpftoolUpgrade kernel-develUpgrade perf-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-livepatch-4.14.352-267.564Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64 | Apr 10, 2025 | Jul 12, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extra-commonUpgrade kernel-headersUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.96-102.177Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade perfUpgrade kernel-develUpgrade kernel-modules-extra | Apr 15, 2025 | Jul 12, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 17, 2024 | Jul 12, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Oct 8, 2024 | Jul 12, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 9, 2024 | Jul 12, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools | Nov 26, 2024 | Jul 12, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Oct 8, 2024 | Jul 12, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jul 12, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Sep 25, 2024 | Jul 12, 2024 |
| Rocky_linux | — | Upgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade kernel-rt-develUpgrade kernel-cross-headersUpgrade kernel-rt-kvmUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-coreUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-develUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debug-coreUpgrade perfUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-rt-modulesUpgrade kernel-modulesUpgrade kernel-debug | Oct 2, 2024 | Jul 12, 2024 |
| Suse | — | Upgrade kernel-debug-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-defaultUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade kernel-azure-baseUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade dtb-broadcomUpgrade gfs2-kmp-azureUpgrade dtb-amlogicUpgrade kernel-default-base-rebuildUpgrade dtb-caviumUpgrade dtb-marvellUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade dtb-socionextUpgrade kernel-rt_debugUpgrade dtb-qcomUpgrade dtb-alteraUpgrade reiserfs-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-azure-optionalUpgrade kernel-rt-extraUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade dtb-rockchipUpgrade kselftests-kmp-azureUpgrade kernel-azure-develUpgrade kernel-syms-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-default-manUpgrade kernel-default-livepatchUpgrade kernel-rt_debug-develUpgrade kernel-azureUpgrade dlm-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-debug-vdsoUpgrade kernel-devel-azureUpgrade kernel-source-rtUpgrade kernel-docsUpgrade kernel-symsUpgrade dtb-amazonUpgrade dlm-kmp-defaultUpgrade kernel-default-baseUpgrade reiserfs-kmp-azureUpgrade dtb-apmUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-obs-qaUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade dtb-exynosUpgrade kernel-develUpgrade kernel-azure-extraUpgrade dtb-hisiliconUpgrade dlm-kmp-azureUpgrade kernel-macrosUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-develUpgrade ocfs2-kmp-defaultUpgrade kernel-sourceUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-default-optionalUpgrade kernel-debug-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade dtb-appleUpgrade kernel-devel-rtUpgrade dtb-freescaleUpgrade cluster-md-kmp-azureUpgrade kernel-rt-develUpgrade kernel-default-extraUpgrade kernel-64kb-optionalUpgrade dtb-renesasUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade kernel-default-develUpgrade dtb-lgUpgrade dtb-armUpgrade kernel-default-livepatch-develUpgrade kernel-debugUpgrade dtb-xilinxUpgrade dtb-amdUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmallUpgrade kselftests-kmp-64kb | Aug 8, 2024 | Jul 12, 2024 |
| Ubuntu | — | Upgrade linux-image-aws-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-5.4.0-1043-iotUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-azureUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-5.4.0-1092-bluefieldUpgrade linux-image-oemUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-5.4.0-1120-kvmUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-aws-hweUpgrade linux-image-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-230-genericUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-4.15.0-1157-kvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1131-oracleUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1079-ibmUpgrade linux-image-gkeop-5.4Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-ibmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1051-xilinx-zynqmpUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-5.4.0-1137-azureUpgrade linux-image-5.4.0-195-genericUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-5.4.0-195-generic-lpaeUpgrade linux-image-5.4.0-1116-raspiUpgrade linux-image-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-4.15.0-230-lowlatencyUpgrade linux-image-oem-osp1Upgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1136-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64kUpgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-intelUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-5.4.0-1132-awsUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-5.4.0-1099-gkeopUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1167-gcpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1014-azureUpgrade linux-image-4.15.0-1182-azureUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-4.15.0-1174-awsUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-virtualUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-195-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-4.15.0-1136-oracleUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmp | Sep 12, 2024 | Jul 12, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jul 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub