CVE-2023-53037
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
02/05/2025
Last modified:
05/05/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
scsi: mpi3mr: Bad drive in topology results kernel crash<br />
<br />
When the SAS Transport Layer support is enabled and a device exposed to<br />
the OS by the driver fails INQUIRY commands, the driver frees up the memory<br />
allocated for an internal HBA port data structure. However, in some places,<br />
the reference to the freed memory is not cleared. When the firmware sends<br />
the Device Info change event for the same device again, the freed memory is<br />
accessed and that leads to memory corruption and OS crash.