CVE-2024-43816

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Revise lpfcprepembedio routine with proper endian macro usages On big endian architectures, it is possible to run into a memory out of bounds pointer dereference when FCP targets are zoned. In lpfcprepembedio, the...

CVE-2024-43816 scsi: lpfc: Revise lpfc_prep_embed_io routine with proper endian macro usages

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Revise lpfcprepembedio routine with proper endian macro usages On big endian architectures, it is possible to run into a memory out of bounds pointer dereference when FCP targets are zoned. In lpfcprepembedio, the...

CVE-2024-43816

CVE-2024-43816 affects the Linux kernel SCSI lpfc driver (lpfc_prep_embed_io in drivers/scsi/lpfc/lpfc_sli.c). On big-endian systems, a memory out-of-bounds dereference can occur when FCP targets are zoned due to memcpy(ptr, fcp_cmnd, sgl->sge_len) referencing a little-endian formatted sgl-&gt...