Re: [PATCH] scsi: fix out of bounds error in /drivers/scsi
From: Bart Van Assche
Date: Wed Jun 18 2025 - 11:27:00 EST
On 6/17/25 11:31 PM, jackysliu wrote:
Can I know what kind of impact this vulnerability will have?
The worst possible impact I see is that the Linux kernel would decide
that RSCS is supported although the device doesn't support it. This
could cause sd_read_io_hints() to print incorrect information. The
following message could be printed when it should not be printed:
"Unexpected: RSCS has been set and the permanent stream count is %u\n"
And is it possible to get a cve number?
You are asking the wrong person. I don't know how to get a CVE number.
Bart.