cve 2023 53376

CVE-2023-53376 is a Linux kernel vulnerability in the mpi3mr SCSI driver, where bitmap sizes were calculated in bytes but bitmap helper functions expect sizes in bits. This mismatch causes out-of-bounds memory access, triggering KASAN slab-out-of-bounds errors during firmware operations, particularly on eHBA-9600 devices. The fix replaces manual byte arithmetic with kernel bitmap helpers like bitmap_zalloc and bitmap_clear, and updates bitmap bookkeeping to use bits. While this is a Linux-specific issue, Windows users running virtualized or dual-boot environments may encounter related stability concerns. The tag covers the vulnerability details, affected driver, and the upstream patch.