CVE-2023-54234

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix missing mrioc-evtackcmds initialization Commit c1af985d27da "scsi: mpi3mr: Add Event acknowledgment logic" introduced an array mrioc-evtackcmds but initialization of the array elements was missed. They are just...

CVE-2023-54234

The CVE-2023-54234 issue is concrete: in the Linux kernel, the MPI3 MR SCSI driver (scsi: mpi3mr) had an uninitialized mrioc->evtack_cmds array, causing mpi3mr_complete_evt_ack() to access host_tag fields that were zeroed. This could lead to incorrect bit indexing when clearing mrico->evtac...