SAS Transport Vulnerability in Linux Kernel Affecting Multiple PHY States

CVE-2024-57804

Summary

A vulnerability in the Linux kernel's SCSI MPI3MR driver allows for the potential corruption of configuration pages related to SAS IO units and expanders. This issue arises when PHYs are rapidly disabled and re-enabled, leading to inconsistent states that can disrupt normal operations. The kernel previously allowed overlapping memory requests for configuration changes, which has been remedied by separating memory allocation for each request, thus preventing data corruption and enhancing the stability of the SAS transport layer.

References