In the Linux kernel, the following vulnerability has been resolved:
scsi: lpfc: Revise lpfc_prep_embed_io routine with proper endian macro usages
On big endian architectures, it is possible to run into a memory out of bounds pointer dereference when FCP targets are zoned.
In lpfc_prep_embed_io, the memcpy(ptr, fcp_cmnd, sgl->sge_len) is referencing a little endian formatted sgl->sge_len value. So, the memcpy can cause big endian systems to crash.
Redefine the *sgl ptr as a struct sli4_sge_le to make it clear that we are referring to a little endian formatted data structure. And, update the routine with proper le32_to_cpu macro usages.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 17, 2024 |
| Suse | — | Upgrade gfs2-kmp-azureUpgrade kernel-default-develUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-rtUpgrade dtb-freescaleUpgrade kernel-devel-azureUpgrade kernel-rt-livepatchUpgrade kernel-sourceUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-docs-htmlUpgrade dtb-broadcomUpgrade kernel-64kb-extraUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-source-rtUpgrade cluster-md-kmp-azureUpgrade dtb-exynosUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-default-livepatchUpgrade kernel-default-optionalUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-develUpgrade dtb-lgUpgrade kernel-azureUpgrade dtb-allwinnerUpgrade kernel-azure-optionalUpgrade dlm-kmp-64kbUpgrade kernel-64kb-optionalUpgrade dtb-amazonUpgrade kernel-rt-vdsoUpgrade dtb-xilinxUpgrade kernel-kvmsmall-vdsoUpgrade dtb-caviumUpgrade dtb-qcomUpgrade kernel-source-vanillaUpgrade kernel-azure-extraUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-syms-azureUpgrade kernel-rt-extraUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade kernel-debugUpgrade kernel-rtUpgrade dtb-alteraUpgrade kernel-develUpgrade kernel-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-amdUpgrade kernel-64kb-livepatch-develUpgrade kernel-macrosUpgrade kernel-azure-livepatch-develUpgrade dtb-mediatekUpgrade kernel-debug-develUpgrade kselftests-kmp-defaultUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-azure-vdsoUpgrade dtb-socionextUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-devel-rtUpgrade kernel-symsUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-rtUpgrade kernel-default-baseUpgrade reiserfs-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-rtUpgrade kernel-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmallUpgrade kernel-64kb-develUpgrade dtb-marvellUpgrade dtb-hisiliconUpgrade dtb-armUpgrade kernel-rt-develUpgrade kernel-default-livepatch-develUpgrade kernel-azure-develUpgrade kselftests-kmp-rtUpgrade dtb-appleUpgrade kernel-debug-livepatch-develUpgrade kernel-syms-rtUpgrade dtb-renesasUpgrade dtb-apmUpgrade kernel-obs-qaUpgrade dtb-amlogic | Dec 5, 2025 | Sep 10, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub