CVE-2022-50532

MEDIUM EPSS 4.0%
Published Oct 7, 20258mo ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Oct 7, 2025 8mo ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add() In mpt3sas_transport_port_add(), if sas_rphy_add() returns error, sas_rphy_free() needs be called to free the resource allocated in sas_end_device_alloc(). Otherwise a kernel crash will happen: Unable to handle kernel NULL pointer dereference at virtual address 0000000000000108 CPU: 45 PID: 37020 Comm: bash Kdump: loaded Tainted: G W 6.1.0-rc1+ #189 pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : device_del+0x54/0x3d0 lr : device_del+0x37c/0x3d0 Call trace: device_del+0x54/0x3d0 attribute_container_class_device_del+0x28/0x38 transport_remove_classdev+0x6c/0x80 attribute_container_device_trigger+0x108/0x110 transport_remove_device+0x28/0x38 sas_rphy_remove+0x50/0x78 [scsi_transport_sas] sas_port_delete+0x30/0x148 [scsi_transport_sas] do_sas_phy_delete+0x78/0x80 [scsi_transport_sas] device_for_each_child+0x68/0xb0 sas_remove_children+0x30/0x50 [scsi_transport_sas] sas_rphy_remove+0x38/0x78 [scsi_transport_sas] sas_port_delete+0x30/0x148 [scsi_transport_sas] do_sas_phy_delete+0x78/0x80 [scsi_transport_sas] device_for_each_child+0x68/0xb0 sas_remove_children+0x30/0x50 [scsi_transport_sas] sas_remove_host+0x20/0x38 [scsi_transport_sas] scsih_remove+0xd8/0x420 [mpt3sas] Because transport_add_device() is not called when sas_rphy_add() fails, the device is not added. When sas_rphy_remove() is subsequently called to remove the device in the remove() path, a NULL pointer dereference happens.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
4.0% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-401

Affected Products 5

VendorProductVersionRange
linuxlinux_kernel*≥3.8  –  <5.4.229
linuxlinux_kernel*≥5.5  –  <5.10.163
linuxlinux_kernel*≥5.11  –  <5.15.86
linuxlinux_kernel*≥5.16  –  <6.0.16
linuxlinux_kernel*≥6.1  –  <6.1.2

References 6

  • git.kernel.org https://git.kernel.org/stable/c/6a92129c8f999ff5b122c100ce7f625eb3e98c4b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/6f6768e2fc8638fabdd8802c2ef693d7aef01db1
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/78316e9dfc24906dd474630928ed1d3c562b568e
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/ce1a69cc85006b494353911b35171da195d79e25
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d17bca3ddfe507874cb826d32721552da12e741f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d60000cb1195a464080b0efb4949daf7594e0020
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/6a92129c8f999ff5b122c100ce7f625eb3e98c4b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/6f6768e2fc8638fabdd8802c2ef693d7aef01db1
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/78316e9dfc24906dd474630928ed1d3c562b568e
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/ce1a69cc85006b494353911b35171da195d79e25
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d17bca3ddfe507874cb826d32721552da12e741f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d60000cb1195a464080b0efb4949daf7594e0020
    Patch