On Fri, 28 Feb 2025 12:37:28 +0300, Dan Carpenter wrote: > The "sz" argument in mpt3sas_check_cmd_timeout() is the number of u32, > not the number of bytes. We dump that many u32 values to dmesg. Passing > the number of bytes will lead to a read overflow. Divide by 4 to get the > correct value. > > Applied to 6.15/scsi-queue, thanks! [1/1] scsi: mpt3sas: Fix buffer overflow in mpt3sas_send_mctp_passthru_req() https://git.kernel.org/mkp/scsi/c/0711f1966a52 -- Martin K. Petersen Oracle Linux Engineering