CVE-2022-49120

scsi: pm8001: Fix task leak in pm8001_send_abort_all()

EPSS 0.3%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

26 Feb 2025Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix task leak in pm8001_send_abort_all() In pm8001_send_abort_all(), make sure to free the allocated sas task if pm8001_tag_alloc() or pm8001_mpi_build_cmd() fail.

Affected products

Linux · Linux

References

https://git.kernel.org/stable/c/146cae06d2682d7563732544be334e8e6d3862b8 https://git.kernel.org/stable/c/2051044d7901f1a9d7be95d0d32e53b88e9548f7 https://git.kernel.org/stable/c/2290dcad6f65864dec518fb2d5fb45f67d684150 https://git.kernel.org/stable/c/34c79d16ee69cb53288c202bb1ab0ba0130d9674 https://git.kernel.org/stable/c/f90a74892f3acf0cdec5844e90fc8686ca13e7d7