RE:[PATCH] scsi: fix out of bounds error in /drivers/scsi

From: jackysliu
Date: Mon Jun 30 2025 - 04:27:20 EST


On 6/18/25 08:26 AM , Bart Van Assche wrote:
>> Can I know what kind of impact this vulnerability will have?
>
>The worst possible impact I see is that the Linux kernel would decide
>that RSCS is supported although the device doesn't support it. This
>could cause sd_read_io_hints() to print incorrect information. The
>following message could be printed when it should not be printed:
>"Unexpected: RSCS has been set and the permanent stream count is %u\n"
>
>> And is it possible to get a cve number?
>
>You are asking the wrong person. I don't know how to get a CVE number.
>
>Bart.

Thank you Bart,for the patient review. I've submitted a new patch which
mentioned way of detection and influenced stable tags.
Best regards.

Jackysliu