CVE-2022-49376

scsi: sd: Fix potential NULL pointer dereference

Medium · published February 26, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
18.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

scsi: sd: Fix potential NULL pointer dereference

If sd_probe() sees an early error before sdkp->device is initialized,

sd_zbc_release_disk() is called. This causes a NULL pointer dereference

when sd_is_zoned() is called inside that function. Avoid this by removing

the call to sd_zbc_release_disk() in sd_probe() error path.

This change is safe and does not result in zone information memory leakage

because the zone information for a zoned disk is allocated only when

sd_revalidate_disk() is called, at which point sdkp->disk_dev is fully set,

resulting in sd_disk_release() being called when needed to cleanup a disk

zone information using sd_zbc_release_disk().

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00268 · 18.0th percentile
Published
2025-02-26T02:11Z
EPSS history
Timeline
  • 26 FEB 02:11Z
    scsi: sd: Fix potential NULL pointer dereference
    cvelistv5