vulnerability
Red Hat: CVE-2023-53037: kernel: scsi: mpi3mr: Bad drive in topology results kernel crash
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:L/AC:M/Au:M/C:N/I:N/A:C) | May 2, 2025 | Jul 9, 2025 | Jul 10, 2025 |
Severity
4
CVSS
(AV:L/AC:M/Au:M/C:N/I:N/A:C)
Published
May 2, 2025
Added
Jul 9, 2025
Modified
Jul 10, 2025
Description
In the Linux kernel, the following vulnerability has been resolved:
scsi: mpi3mr: Bad drive in topology results kernel crash
When the SAS Transport Layer support is enabled and a device exposed to
the OS by the driver fails INQUIRY commands, the driver frees up the memory
allocated for an internal HBA port data structure. However, in some places,
the reference to the freed memory is not cleared. When the firmware sends
the Device Info change event for the same device again, the freed memory is
accessed and that leads to memory corruption and OS crash.
Solution
no-fix-redhat-rpm-package
References
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.