CVE-2024-57804

CVE-2024-57804

High · published January 11, 2025

CVSS v3.1
7.3
EPSS
0%
Percentile
10.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs

The driver, through the SAS transport, exposes a sysfs interface to

enable/disable PHYs in a controller/expander setup. When multiple PHYs

are disabled and enabled in rapid succession, the persistent and current

config pages related to SAS IO unit/SAS Expander pages could get

corrupted.

Use separate memory for each config request.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00211 · 10.8th percentile
Published
2025-01-11T18:15Z
Affected products (2)
ProductVersionsFixed in
linux/linux_kernel≥ 6.1, < 6.12.86.12.8
linux/linux_kernelall versions—
References (3)
https://git.kernel.org/stable/c/711201a8b8334a397440ac0b859df0054e174bc9 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/869fdc6f0606060301aef648231e186c7c542f5a · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/d7dade716905b189f17cc1601cbb4b421a811a28 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 11 JAN 12:39Z
    scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs
    cvelistv5