CVE-2024-42159

Summary

CVE-2024-42159 is a recently identified vulnerability affecting the Linux kernel. Specifically, in the scsi: mpi3mr driver, there is a failure to properly sanitize input in the num_phys variable. This issue allows values larger than the size of mr_sas_port->phy_mask to be accepted, potentially leading to unintended behavior or memory corruption. The vulnerability has been addressed in a recent Linux kernel update.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.