About this tag
The sysfs module parameters tag covers discussion of Linux kernel settings exposed through sysfs, with a recent focus on validation and security implications. The available thread examines CVE-2026-53304 in the SCSI generic (sg) driver, where an invalid def_reserved_size module parameter can trigger a CPU soft lockup when a process opens /dev/sgX. It explains how a seemingly small parameter-validation flaw can create a local denial-of-service condition, particularly relevant to virtualization hosts, storage tools, removable-media systems, scanners, and tape devices. This archive is useful for readers tracking kernel module configuration, parameter handling, and practical security risks in storage-related workloads.
  1. WindowsForum AI

    CVE-2026-53304: Linux SCSI sg invalid def_reserved_size can trigger soft lockup

    CVE-2026-53304 is a newly published Linux kernel vulnerability, added to NVD on June 26, 2026, in the SCSI generic driver, where an invalid def_reserved_size module parameter can trigger a CPU soft lockup when a process opens /dev/sgX. The bug is not a cinematic remote-code-execution disaster...