CVE-2022-48695

scsi: mpt3sas: Fix use-after-free warning

State: Published
Severity: 7.8 High
Published: May 3, 2024
Updated: Aug 5, 2026
Reserved: May 3, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: mpt3sas: Fix use-after-free warning

Fix the following use-after-free warning which is observed during controller reset:

refcount_t: underflow; use-after-free. WARNING: CPU: 23 PID: 5399 at lib/refcount.c:28 refcount_warn_saturate+0xa6/0xf0

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	146b16c8071f5f6c67895d15beeee1163f5107c4 to before b8fc9e91b931215110ba824d1a2983c5f60b6f82Affected 146b16c8071f5f6c67895d15beeee1163f5107c4 to before d4959d09b76eb7a4146f5133962b88d3bddb63d6Affected 146b16c8071f5f6c67895d15beeee1163f5107c4 to before 82efb917eeb27454dc4c6fe26432fc8f6c75bc16Affected 146b16c8071f5f6c67895d15beeee1163f5107c4 to before 5682c94644fde72f72bded6580c38189ffc856b5Affected 146b16c8071f5f6c67895d15beeee1163f5107c4 to before ea10a652ad2ae2cf3eced6f632a5c98f26727057Affected 146b16c8071f5f6c67895d15beeee1163f5107c4 to before 6229fa494a5949be209bc73afbc5d0a749c2e3c7Affected 146b16c8071f5f6c67895d15beeee1163f5107c4 to before 41acb064c4e013808bc7d5fc1b506fa449425b0bAffected 146b16c8071f5f6c67895d15beeee1163f5107c4 to before 991df3dd5144f2e6b1c38b8d20ed3d4d21e20b34Affected
LinuxLinux	4.4Affected before 4.4Not affected 4.9.328 through 4.9.Not affected 4.14.293 through 4.14.Not affected 4.19.258 through 4.19.Not affected 5.4.213 through 5.4.Not affected 5.10.143 through 5.10.Not affected 5.15.68 through 5.15.Not affected 5.19.9 through 5.19.*Not affected 6.0 and laterNot affected

Product

Versions

LinuxLinux

146b16c8071f5f6c67895d15beeee1163f5107c4 to before b8fc9e91b931215110ba824d1a2983c5f60b6f82Affected
146b16c8071f5f6c67895d15beeee1163f5107c4 to before d4959d09b76eb7a4146f5133962b88d3bddb63d6Affected
146b16c8071f5f6c67895d15beeee1163f5107c4 to before 82efb917eeb27454dc4c6fe26432fc8f6c75bc16Affected
146b16c8071f5f6c67895d15beeee1163f5107c4 to before 5682c94644fde72f72bded6580c38189ffc856b5Affected
146b16c8071f5f6c67895d15beeee1163f5107c4 to before ea10a652ad2ae2cf3eced6f632a5c98f26727057Affected
146b16c8071f5f6c67895d15beeee1163f5107c4 to before 6229fa494a5949be209bc73afbc5d0a749c2e3c7Affected
146b16c8071f5f6c67895d15beeee1163f5107c4 to before 41acb064c4e013808bc7d5fc1b506fa449425b0bAffected
146b16c8071f5f6c67895d15beeee1163f5107c4 to before 991df3dd5144f2e6b1c38b8d20ed3d4d21e20b34Affected

LinuxLinux

4.4Affected
before 4.4Not affected
4.9.328 through 4.9.*Not affected
4.14.293 through 4.14.*Not affected
4.19.258 through 4.19.*Not affected
5.4.213 through 5.4.*Not affected
5.10.143 through 5.10.*Not affected
5.15.68 through 5.15.*Not affected
5.19.9 through 5.19.*Not affected
6.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.