PT-2025-8049 · Linux+2 · Linux Kernel+2
Published
2022-02-22
·
Updated
2025-05-20
·
CVE-2022-49121
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A issue in the Linux kernel has been resolved, specifically in the scsi: pm8001 component. The problem occurred when certain functions, such as
pm8001 chip set dev state req(), pm8001 chip fw flash update req(), pm80xx chip phy ctl req(), and pm8001 chip reg dev req(), failed to free allocated tags using pm8001 tag free() after pm8001 mpi build cmd() failed. Additionally, in pm8001 exec internal task abort(), if the chip's task abort method failed, the tag allocated for the abort request task was not freed, which has been addressed by adding a call to pm8001 tag free().Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Allocation of Resources Without Limits
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Suse