CVE-2023-53320

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The mpi3mr get all tgt info() function contains several issues. The function incorrectly calculates the valid entry length in alltgt info by assuming an incorrect size for the header of the mpi3mr device map info struct. It also incorrectly calculates the valid entry length by excluding one entry and uses memcpy() when substitution would be sufficient. Additionally, it specifies an incorrect length to sg copy from buffer(), leading to a potential out-of-bounds write.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.