In the Linux kernel, the following vulnerability has been resolved:
scsi: lpfc: Revise lpfc_prep_embed_io routine with proper endian macro usages
On big endian architectures, it is possible to run into a memory out of bounds pointer dereference when FCP targets are zoned.
In lpfc_prep_embed_io, the memcpy(ptr, fcp_cmnd, sgl->sge_len) is referencing a little endian formatted sgl->sge_len value. So, the memcpy can cause big endian systems to crash.
Redefine the *sgl ptr as a struct sli4_sge_le to make it clear that we are referring to a little endian formatted data structure. And, update the routine with proper le32_to_cpu macro usages.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 17, 2024 |
| Suse | — | Upgrade dtb-marvellUpgrade kernel-azure-develUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-rt-develUpgrade dlm-kmp-defaultUpgrade dtb-armUpgrade dtb-appleUpgrade kernel-obs-qaUpgrade dtb-amdUpgrade dtb-amlogicUpgrade dtb-apmUpgrade kernel-kvmsmallUpgrade dtb-renesasUpgrade kernel-syms-rtUpgrade kselftests-kmp-rtUpgrade kernel-default-extraUpgrade dtb-socionextUpgrade dtb-hisiliconUpgrade reiserfs-kmp-rtUpgrade dtb-rockchipUpgrade kernel-rt_debug-vdsoUpgrade kernel-defaultUpgrade dtb-nvidiaUpgrade kernel-rt_debugUpgrade ocfs2-kmp-rtUpgrade kernel-default-baseUpgrade kernel-symsUpgrade dlm-kmp-azureUpgrade dlm-kmp-rtUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-rtUpgrade reiserfs-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-64kb-develUpgrade kselftests-kmp-defaultUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade dtb-mediatekUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-develUpgrade kernel-macrosUpgrade dtb-amazonUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade dtb-broadcomUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-azure-extraUpgrade dtb-qcomUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-source-rtUpgrade dtb-exynosUpgrade kernel-64kb-extraUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-optionalUpgrade kernel-default-vdsoUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade kernel-azureUpgrade dtb-xilinxUpgrade dtb-lgUpgrade kernel-default-optionalUpgrade kernel-obs-buildUpgrade kselftests-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-default-base-rebuildUpgrade dtb-caviumUpgrade dtb-allwinnerUpgrade kernel-debug-vdsoUpgrade kernel-sourceUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-rtUpgrade dtb-freescaleUpgrade kernel-default-develUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rtUpgrade kernel-64kbUpgrade dtb-alteraUpgrade kernel-source-azureUpgrade kernel-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug | Dec 5, 2025 | Sep 10, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub