PT-2024-27210 · Linux+9 · Linux Kernel+9
Published
2024-03-23
·
Updated
2026-05-26
·
CVE-2024-36920
CVSS v2.0
5.7
Medium
| Vector | AV:L/AC:L/Au:S/C:P/I:P/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a memcpy field-spanning write warning in the Linux kernel's mpi3mr driver. When the "storcli2 show" command is executed for eHBA-9600, the driver prints a warning message indicating a detected field-spanning write of size 128 to a single field "bsg reply buf->reply buf". The cause of the warning is a 128-byte memcpy to a 1-byte size array " u8 replay buf[1]" in the struct mpi3mr bsg in reply buf, which is intended to be a flexible length array, resulting in a false positive warning.
Recommendations
To suppress the warning, remove the constant number '1' from the array declaration and clarify that it has flexible length. Also, adjust the memory allocation size to match the change.
Exploit
Fix
Allocation of Resources Without Limits
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Astra Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu