CVE-2022-49376

MEDIUM EPSS 15.8%
Published Feb 26, 20251y ago · Modified Jun 17, 20262w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Feb 26, 2025 1y ago
Last Modified Jun 17, 2026 2w ago

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: sd: Fix potential NULL pointer dereference If sd_probe() sees an early error before sdkp->device is initialized, sd_zbc_release_disk() is called. This causes a NULL pointer dereference when sd_is_zoned() is called inside that function. Avoid this by removing the call to sd_zbc_release_disk() in sd_probe() error path. This change is safe and does not result in zone information memory leakage because the zone information for a zoned disk is allocated only when sd_revalidate_disk() is called, at which point sdkp->disk_dev is fully set, resulting in sd_disk_release() being called when needed to cleanup a disk zone information using sd_zbc_release_disk().

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
15.8% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-476 NULL Pointer Dereference Memory Safety

Affected Products 4

VendorProductVersionRange
linuxlinux_kernel*≥4.10  –  <5.10.122
linuxlinux_kernel*≥5.11  –  <5.15.47
linuxlinux_kernel*≥5.16  –  <5.17.15
linuxlinux_kernel*≥5.18  –  <5.18.4

References 5

  • git.kernel.org https://git.kernel.org/stable/c/05fbde3a77a4f1d62e4c4428f384288c1f1a0be5
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/0fcb0b131cc90c8f523a293d84c58d0c7273c96f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/3733439593ad12f7b54ae35c273ea6f15d692de3
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/78f8e96df06e2d04d82d4071c299b59d28744f47
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c1f0187025905e9981000d44a92e159468b561a8
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/05fbde3a77a4f1d62e4c4428f384288c1f1a0be5
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/0fcb0b131cc90c8f523a293d84c58d0c7273c96f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/3733439593ad12f7b54ae35c273ea6f15d692de3
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/78f8e96df06e2d04d82d4071c299b59d28744f47
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c1f0187025905e9981000d44a92e159468b561a8
    Patch