CVE-2022-49121

scsi: pm8001: Fix tag leaks on error

published February 26, 2025

CVSS
—
EPSS
0%
Percentile
18.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

scsi: pm8001: Fix tag leaks on error

In pm8001_chip_set_dev_state_req(), pm8001_chip_fw_flash_update_req(),

pm80xx_chip_phy_ctl_req() and pm8001_chip_reg_dev_req() add missing calls

to pm8001_tag_free() to free the allocated tag when pm8001_mpi_build_cmd()

fails.

Similarly, in pm8001_exec_internal_task_abort(), if the chip ->task_abort

method fails, the tag allocated for the abort request task must be

freed. Add the missing call to pm8001_tag_free().

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00268 · 18.0th percentile
Published
2025-02-26T01:55Z
EPSS history
Timeline
  • 26 FEB 01:55Z
    scsi: pm8001: Fix tag leaks on error
    cvelistv5