Broadcom LSI Storage Authority (LSA) - on-disk credential/key storage on Linux and Windows: The keys LSA uses

Impact

The keys LSA uses to encrypt its stored secrets sit in files any local user can read. On a bare-metal node that means anyone who lands non-root code on the host - a container escape, a compromised monitoring agent, a tenant with shell on a shared management jumpbox - recovers the credentials LSA uses to talk to the RAID controller and, in Gateway deployments, to other nodes. That turns a low-privilege foothold into control of the storage controller on the fleet, which is the layer that decides whether the next tenant sees the previous tenant's blocks.

Who can reach it

Any unprivileged local account on a host running the LSA agent (Linux or Windows). No network exposure required, no controller access required first.

What to do

Upgrade LSA to the fixed 7.017.011.000 build. If your OEM has not shipped it, tighten the file permissions on the LSA install directory and its key material by hand and re-apply after every OEM tooling update, since OEM installers reset them. Rotate any controller/gateway credentials that were stored under the old keys - patching alone does not invalidate what has already leaked. No reboot, no array impact.

References

Related entries

• Linux x86/mm - pfn_to_kaddr() 64-bit input handling (SNP support code): On 64-bit platforms the pfn_to_kaddr() macroCVE-2023-52659 · Linux x86/mm - pfn_to_kaddr() 64-bit input handling (SNP support code)Medium
• Linux perf/x86/amd/core - overflow status not cleared for unhandled indices: Unhandled overflow bits are left setCVE-2023-53073 · Linux perf/x86/amd/core - overflow status not cleared for unhandled indicesMedium
• Linux x86/MCE - CS register not saved on AMD Zen Instruction Fetch Poison errors: On AMD Zen systems, the InstructionCVE-2023-53438 · Linux x86/MCE - CS register not saved on AMD Zen Instruction Fetch Poison errorsMedium
• Linux i915 GVT-g mediated GPU virtualisation: Unsafe cleanup of per-vGPU debugfs state when a mediated vGPU isCVE-2023-53625 · Linux i915 GVT-g mediated GPU virtualisationMedium
• Citrix NetScaler ADC/Gateway: Code injection on the management interfaceCVE-2023-6548 · Citrix NetScaler ADC/GatewayMedium
• Linux nfsd (NFS server): Broken RELEASE_LOCKOWNER handling in nfsd causing state corruptionCVE-2024-26629 · Linux nfsd (NFS server)Medium