Back
CVE-2022-49121
scsi: pm8001: Fix tag leaks on error
Medium5.5EPSS 0.27%
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix tag leaks on error In pm8001_chip_set_dev_state_req(), pm8001_chip_fw_flash_update_req(), pm80xx_chip_phy_ctl_req() and pm8001_chip_reg_dev_req() add missing calls to pm8001_tag_free() to free the allocated tag when pm8001_mpi_build_cmd() fails. Similarly, in pm8001_exec_internal_task_abort(), if the chip ->task_abort method fails, the tag allocated for the abort request task must be freed. Add the missing call to pm8001_tag_free().
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Analyzed | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.27% · top 81% of all CVEs (7 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.
Weakness
Affected products
- affected dbf9bfe615717d1145f263c0049fe2328e6ed395 – < a0bb65eadbf942024226241d9d99fed17168940b
- affected dbf9bfe615717d1145f263c0049fe2328e6ed395 – < 43c617eefab7077d69f5989ad3e2a273da1d728b
- affected dbf9bfe615717d1145f263c0049fe2328e6ed395 – < bdc74815f1c39905054b7d47399e0260b201b14d
- affected dbf9bfe615717d1145f263c0049fe2328e6ed395 – < 9cc72bcc1c096ed42c91646f130d4b4191580a4c
- affected dbf9bfe615717d1145f263c0049fe2328e6ed395 – < 4c8f04b1905cd4b776d0b720463c091545478ef7
- affected 2.6.33
- unaffected < 2.6.33
- unaffected 5.10.111 – ≤ 5.10.*
- unaffected 5.15.34 – ≤ 5.15.*
- unaffected 5.16.20 – ≤ 5.16.*
- unaffected 5.17.3 – ≤ 5.17.*
- unaffected 5.18 – ≤ *
References (5)
- https://git.kernel.org/stable/c/a0bb65eadbf942024226241d9d99fed17168940b (opens in a new tab)
- https://git.kernel.org/stable/c/43c617eefab7077d69f5989ad3e2a273da1d728b (opens in a new tab)
- https://git.kernel.org/stable/c/bdc74815f1c39905054b7d47399e0260b201b14d (opens in a new tab)
- https://git.kernel.org/stable/c/9cc72bcc1c096ed42c91646f130d4b4191580a4c (opens in a new tab)
- https://git.kernel.org/stable/c/4c8f04b1905cd4b776d0b720463c091545478ef7 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2022-49121)Record last updated .