CVE-2024-36920

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a memcpy field-spanning write warning in the Linux kernel's mpi3mr driver. When the "storcli2 show" command is executed for eHBA-9600, the driver prints a warning message indicating a detected field-spanning write of size 128 to a single field "bsg reply buf->reply buf". The cause of the warning is a 128-byte memcpy to a 1-byte size array " u8 replay buf[1]" in the struct mpi3mr bsg in reply buf, which is intended to be a flexible length array, resulting in a false positive warning.

Recommendations To suppress the warning, remove the constant number '1' from the array declaration and clarify that it has flexible length. Also, adjust the memory allocation size to match the change.