In the Linux kernel, the following vulnerability has been resolved:
scsi: lpfc: Revise lpfc_prep_embed_io routine with proper endian macro usages
On big endian architectures, it is possible to run into a memory out of bounds pointer dereference when FCP targets are zoned.
In lpfc_prep_embed_io, the memcpy(ptr, fcp_cmnd, sgl->sge_len) is referencing a little endian formatted sgl->sge_len value. So, the memcpy can cause big endian systems to crash.
Redefine the *sgl ptr as a struct sli4_sge_le to make it clear that we are referring to a little endian formatted data structure. And, update the routine with proper le32_to_cpu macro usages.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 17, 2024 |
| Suse | — | Upgrade kselftests-kmp-rtUpgrade dtb-appleUpgrade kernel-syms-rtUpgrade kernel-azure-vdsoUpgrade dtb-renesasUpgrade kselftests-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-docsUpgrade kernel-default-extraUpgrade dlm-kmp-defaultUpgrade dtb-amdUpgrade gfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade dtb-socionextUpgrade dtb-apmUpgrade dlm-kmp-rtUpgrade kernel-symsUpgrade kernel-macrosUpgrade dlm-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-rt_debug-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debugUpgrade reiserfs-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-azure-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade kernel-devel-rtUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-azureUpgrade dtb-rockchipUpgrade kernel-default-livepatch-develUpgrade dtb-marvellUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-debug-livepatch-develUpgrade dtb-armUpgrade kernel-azure-develUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade kernel-default-baseUpgrade dtb-xilinxUpgrade kernel-64kb-optionalUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-develUpgrade dtb-caviumUpgrade kernel-sourceUpgrade cluster-md-kmp-rtUpgrade kernel-default-develUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-azureUpgrade kernel-docs-htmlUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-devel-azureUpgrade dtb-amazonUpgrade kernel-rt_debug-develUpgrade dtb-lgUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debugUpgrade dtb-sprdUpgrade dtb-broadcomUpgrade kernel-rt-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade kernel-default-optionalUpgrade kernel-rtUpgrade kernel-64kbUpgrade dtb-alteraUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-develUpgrade kernel-syms-azureUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-azure-extraUpgrade dtb-qcomUpgrade ocfs2-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-source-rtUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade dtb-exynosUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-default-vdsoUpgrade dtb-freescaleUpgrade dtb-allwinnerUpgrade kernel-default-livepatchUpgrade kernel-debug-vdso | Dec 5, 2025 | Sep 10, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub