CVE-2023-54011

A flaw was found in the Linux kernel's mpi3mr SCSI driver for Broadcom MPI3 HBA controllers. The driver writes 64 bytes when only 32 bytes should be written, causing an out-of-bounds write detected by KASAN. This memory corruption could lead to system instability or a kernel crash.

This vulnerability affects systems with Broadcom MPI3 MegaRAID or HBA controllers using the mpi3mr driver. The out-of-bounds write is limited to a specific operation within the driver. Systems without this hardware are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.