CyberRota Analysis
AI-GeneratedA vulnerability in the Linux kernel's SCSI block layer allows for a buffer overflow when the `io_uring` interface does not properly enforce the maximum response length, potentially leading to unauthorized memory access. This could result in data corruption or system crashes, affecting the integrity and availability of services relying on SCSI devices. System administrators and developers using affected Linux distributions should prioritize addressing this issue to mitigate potential security risks.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: scsi: bsg: Cap io_uring sense copy to max_response_len Completion copied scmd->sense_len to the user response buffer without honoring max_response_len. After a valid sense, the midlayer sets sense_len to the real length (up to SCSI_SENSE_BUFFERSIZE), so a smaller user buffer was overrun.