CVE-2024-43816

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Revise lpfcprepembedio routine with proper endian macro usages On big endian architectures, it is possible to run into a memory out of bounds pointer dereference when FCP targets are zoned. In lpfcprepembedio, the...

CVE-2024-43816 scsi: lpfc: Revise lpfc_prep_embed_io routine with proper endian macro usages

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Revise lpfcprepembedio routine with proper endian macro usages On big endian architectures, it is possible to run into a memory out of bounds pointer dereference when FCP targets are zoned. In lpfcprepembedio, the...

CVE-2024-43816

CVE-2024-43816 : In the Linux kernel, the lpfc SCSI target code (lpfc_prep_embed_io) referenced a little-endian sgl->sge_len value when copying with memcpy, which could cause a memory out-of-bounds access on big-endian systems when FCP targets are zoned. The fix redefines the sgl pointer as a ...