CVE-2022-49120

scsi: pm8001: Fix task leak in pm8001_send_abort_all()

MEDIUM

5.5

CVSS Score

Published: February 26, 2025 at 01:55 AM UTC

Updated: June 17, 2026 at 05:17 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.3%

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix task leak in pm8001_send_abort_all() In pm8001_send_abort_all(), make sure to free the allocated sas task if pm8001_tag_alloc() or pm8001_mpi_build_cmd() fail.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

v < 5.10.1113.10 ≤ v < 5.10.1113.10 ≤ v < 5.15.343.10 ≤ v < 5.16.203.10 ≤ v < 5.17.33.10 ≤ v < 5.185.11 ≤ v < 5.15.345.16 ≤ v < 5.16.205.17 ≤ v < 5.17.33.10c6b9ef5779c3e1edfa9de949d2a51252bc347663

Vendor states this is fixed in 146cae06d2682d7563732544be334e8e6d3862b8 (fixed)

Vendor states this is fixed in 2051044d7901f1a9d7be95d0d32e53b88e9548f7 (fixed)

Vendor states this is fixed in 2290dcad6f65864dec518fb2d5fb45f67d684150 (fixed)

Vendor states this is fixed in 34c79d16ee69cb53288c202bb1ab0ba0130d9674 (fixed)

Vendor states this is fixed in f90a74892f3acf0cdec5844e90fc8686ca13e7d7 (fixed)

Vendor states this is fixed in 3.10 (unaffected)

Vendor states this is fixed in 5.10.111 (unaffected)

Vendor states this is fixed in 5.15.34 (unaffected)

Vendor states this is fixed in 5.16.20 (unaffected)

Vendor states this is fixed in 5.17.3 (unaffected)

Vendor states this is fixed in 5.18 (unaffected)