Riskcovery

CVE-2024-57804

scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs

State
Published
Severity
7.3 High
Published
Jan 11, 2025
Updated
Oct 30, 2026
Reserved
Jan 9, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs

The driver, through the SAS transport, exposes a sysfs interface to enable/disable PHYs in a controller/expander setup. When multiple PHYs are disabled and enabled in rapid succession, the persistent and current config pages related to SAS IO unit/SAS Expander pages could get corrupted.

Use separate memory for each config request.

Scores

CVSSScoreVectorSource
3.17.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 32d457d5a2af9bf5ddbe28297eabf1fc93451665 to before 90dffa3cec53c0d1af7813a2603f740730c4417eAffected
  • 32d457d5a2af9bf5ddbe28297eabf1fc93451665 to before d7dade716905b189f17cc1601cbb4b421a811a28Affected
  • 32d457d5a2af9bf5ddbe28297eabf1fc93451665 to before 869fdc6f0606060301aef648231e186c7c542f5aAffected
  • 32d457d5a2af9bf5ddbe28297eabf1fc93451665 to before 711201a8b8334a397440ac0b859df0054e174bc9Affected
LinuxLinux
  • 6.1Affected
  • before 6.1Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.8 through 6.12.*Not affected
  • 6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.