In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot<\/p>\n
For QLAFX00 the request ring is ioremapped device I\/O memory
\n(ha->iobase + req_que_off), not DMA-coherent RAM, which is why the rest
\nof the FX00 path accesses it through memcpy_toio() and the wrt_reg_*
\nhelpers. __qla2x00_alloc_iocbs() however zeroed the producer slot with a
\nplain memset(). On architectures such as ARM64 a regular memset() may
\nemit unaligned or block-zeroing instructions (e.g. DC ZVA) that are
\ninvalid on Device memory, leading to a synchronous external abort.<\/p>\n
Use memset_io() to clear the slot for QLAFX00, matching the I\/O
\naccessors used elsewhere on this ring. Other adapters keep the plain
\nmemset() on their DMA-coherent rings. The zero-fill is retained for FX00
\nbecause its IOCB builders (e.g. qlafx00_fxdisc_iocb()) copy only part of
\nthe entry and rely on the unused tail being pre-zeroed.<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot<\/p>\n
For QLAFX00 the request ring is ioremapped device I\/O memory
\n(ha<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-39057","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/39057","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=39057"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=39057"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=39057"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}