CVE-2024-36920 scsi: mpi3mr: Avoid memcpy field-spanning write WARNING
A false-positive kernel warning in the mpi3mr driver could be triggered by specific commands, potentially causing log noise or minor stability issues.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-36920?
CVE-2024-36920 is a medium-severity vulnerability in Linux kernel, published on 30 May 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
scsi: mpi3mr: Avoid memcpy field-spanning write WARNING
When the "storcli2 show" command is executed for eHBA-9600, mpi3mr driver prints this WARNING message:
memcpy: detected field-spanning write (size 128) of single field "bsg_reply_buf->reply_buf" at drivers/scsi/mpi3mr/mpi3mr_app.c:1658 (size 1) WARNING: CPU: 0 PID: 12760 at drivers/scsi/mpi3mr/mpi3mr_app.c:1658 mpi3mr_bsg_request+0x6b12/0x7f10 [mpi3mr]
The cause of the WARN is 128 bytes memcpy to the 1 byte size array "__u8 replay_buf[1]" in the struct mpi3mr_bsg_in_reply_buf. The array is intended to be a flexible length array, so the WARN is a false positive.
To suppress the WARN, remove the constant number '1' from the array declaration and clarify that it has flexible length. Also, adjust the memory allocation size to match the change.
Which versions are affected by CVE-2024-36920?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-36920?
Apply the vendor's patch.
Is CVE-2024-36920 being exploited?
There is no known exploitation of CVE-2024-36920 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2024-36920, DEBIAN-CVE-2024-36920, ROOT-OS-UBUNTU-2204-CVE-2024-36920, UBUNTU-CVE-2024-36920.