CVE-2023-53320

In the Linux kernel, the following vulnerability has been resolved:

scsi: mpi3mr: Fix issues in mpi3mrgetalltgtinfo()

The function mpi3mrgetalltgtinfo() has four issues:

1) It calculates valid entry length in alltgtinfo assuming the header part of the struct mpi3mrdevicemapinfo would equal to sizeof(u32). The correct size is sizeof(u64).

2) When it calculates the valid entry length kernentrylen, it excludes one entry by subtracting 1 from numdevices.

3) It copies num_device by calling memcpy(). Substitution is enough.

4) It does not specify the calculated length to sgcopyfrombuffer(). Instead, it specifies the payload length which is larger than the alltgtinfo size. It causes "BUG: KASAN: slab-out-of-bounds".

Fix the issues by using the correct header size, removing the subtraction from numdevices, replacing the memcpy() with substitution and specifying the correct length to sgcopyfrombuffer().