Home

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix missing mrioc->evtack_cmds initialization Commit c1af985d27da ("scsi: mpi3mr: Add Event acknowledgment logic") introduced an array mrioc->evtack_cmds but initialization of the array elements was missed. They are just zero cleared. The function mpi3mr_complete_evt_ack() refers host_tag field of the elements. Due to the zero value of the host_tag field, the function calls clear_bit() for mrico->evtack_cmds_bitmap with wrong bit index. This results in memory access to invalid address and "BUG: KASAN: use-after-free". This BUG was observed at eHBA-9600 firmware update to version 8.3.1.0. To fix it, add the missing initialization of mrioc->evtack_cmds.

PUBLISHED Reserved 2025-12-30 | Published 2025-12-30 | Updated 2025-12-30 | Assigner Linux

Product status

Default status
unaffected

c1af985d27da2d530c22604644e9025810f57d7c (git) before 4e0dfdb48a824deac3dfbc67fb856ef2aee13529
affected

c1af985d27da2d530c22604644e9025810f57d7c (git) before 67989091e11a974003ddf2ec39bc613df8eadd83
affected

c1af985d27da2d530c22604644e9025810f57d7c (git) before e39ea831ebad4ab15c4748cb62a397a8abcca36e
affected

Default status
affected

5.17
affected

Any version before 5.17
unaffected

6.1.16 (semver)
unaffected

6.2.3 (semver)
unaffected

6.3 (original_commit_for_fix)
unaffected

References

git.kernel.org/...c/4e0dfdb48a824deac3dfbc67fb856ef2aee13529

git.kernel.org/...c/67989091e11a974003ddf2ec39bc613df8eadd83

git.kernel.org/...c/e39ea831ebad4ab15c4748cb62a397a8abcca36e

cve.org (CVE-2023-54234)

nvd.nist.gov (CVE-2023-54234)

Download JSON

Data based on CVE®. Copyright © 1999-2025, The MITRE Corporation. All rights reserved.