PT-2025-53936 · Unknown+1 · Pm8001 Driver+1

Published 2025-12-30 · Updated 2026-01-28 · CVE-2022-50818

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-rc1-205202-gf26f8f761e83 #218

Description A flaw exists in the SCSI subsystem of the Linux kernel, specifically within the pm8001 driver. The issue involves incorrect handling of the running req counter when internal abort commands are completed. This can lead to a system hang when disabling the remote phy for a SATA disk. The root cause is that the running req counter is incremented for internal abort commands but is not decremented upon completion, resulting in a stalled state. The issue is triggered when delivering a sas task to the hardware.

Recommendations Update to a version later than 6.0.0-rc1-205202-gf26f8f761e83 #218.

Exploit

Related Identifiers

CVE-2022-50818

SUSE-SU-2026:0263-1

SUSE-SU-2026:0317-1

Affected Products

Linux Kernel

Pm8001 Driver

References · 849

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50818.json · Exploit
• https://ubuntu.com/security/CVE-2022-50818 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50818 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50818 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50818 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0317-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50818 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0263-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50818 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50818 · Security Note
• https://bugzilla.suse.com/1256349 · Note
• https://suse.com/security/cve/CVE-2022-50698 · Note
• https://bugzilla.suse.com/1254979 · Note
• https://suse.com/security/cve/CVE-2023-54166 · Note
• https://suse.com/security/cve/CVE-2023-54018 · Note