CVE-2024-57804

Source
https://cve.org/CVERecord?id=CVE-2024-57804
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-57804.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-57804
Downstream
AZL (1)
BELL (1)
DEBIAN (1)
ECHO (1)
OESA (2)
ROOT (2)
SUSE (8)
UBUNTU (1)
Related
Published
2025-01-11T12:39:50Z
Modified
2026-11-01T02:30:27Z
Severity
  • 7.3 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H CVSS Calculator
Summary
scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs
Details

In the Linux kernel, the following vulnerability has been resolved:

scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs

The driver, through the SAS transport, exposes a sysfs interface to enable/disable PHYs in a controller/expander setup. When multiple PHYs are disabled and enabled in rapid succession, the persistent and current config pages related to SAS IO unit/SAS Expander pages could get corrupted.

Use separate memory for each config request.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/57xxx/CVE-2024-57804.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
32d457d5a2af9bf5ddbe28297eabf1fc93451665
Fixed
90dffa3cec53c0d1af7813a2603f740730c4417e
Fixed
d7dade716905b189f17cc1601cbb4b421a811a28
Fixed
869fdc6f0606060301aef648231e186c7c542f5a
Fixed
711201a8b8334a397440ac0b859df0054e174bc9

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-57804.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.1.0
Fixed
6.1.191
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.160
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.8

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-57804.json"