Executive brief
libstoragemgmt is a library that manages storage devices and queries device metadata like serial numbers. An attacker with control over a local or virtual storage device can craft malicious SCSI device data to crash the application querying the device, causing a denial of service. The vulnerability requires local access to a storage device but could destabilize systems that automatically query untrusted storage backends.
Technical details
A stack buffer overflow in the _sg_parse_vpd_80() function occurs when parsing SCSI Vital Product Data (VPD) page 0x80 with a malformed untrusted page length field during serial number extraction. The attack requires local access and the ability to control or manipulate storage device data; successful exploitation results in process crash leading to denial of service. The vulnerability is in the SCSI VPD parsing logic and affects any system querying serial numbers from untrusted storage devices.
Affected products
- Red Hat libstoragemgmt
Timeline
- 2026-09-21: disclosed