CVE-2022-48824

scsi: myrs: Fix crash in error case

State: Published
Severity: Not scored
Published: Jul 16, 2024
Updated: May 11, 2026
Reserved: Jul 16, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: myrs: Fix crash in error case

In myrs_detect(), cs->disable_intr is NULL when privdata->hw_init() fails with non-zero. In this case, myrs_cleanup(cs) will call a NULL ptr and crash the kernel.

[ 1.105606] myrs 0000:00:03.0: Unknown Initialization Error 5A [ 1.105872] myrs 0000:00:03.0: Failed to initialize Controller [ 1.106082] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 1.110774] Call Trace: [ 1.110950] myrs_cleanup+0xe4/0x150 [myrs] [ 1.111135] myrs_probe.cold+0x91/0x56a [myrs] [ 1.111302] ? DAC960_GEM_intr_handler+0x1f0/0x1f0 [myrs] [ 1.111500] local_pci_probe+0x48/0x90

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	77266186397c6c782a3f670d32808a9671806ec5 to before 5c5ceea00c8c9df150708e66cb9f2891192c1162Affected 77266186397c6c782a3f670d32808a9671806ec5 to before 0e42c4a3d732517edc3766dd45a14e60d29dd929Affected 77266186397c6c782a3f670d32808a9671806ec5 to before 6207f35c213f6cb2fc3f13b5e77f08c710e1de19Affected 77266186397c6c782a3f670d32808a9671806ec5 to before 1d6cd26605b4d662063a83c15c776b5299a1cb23Affected 77266186397c6c782a3f670d32808a9671806ec5 to before 4db09593af0b0b4d7d4805ebb3273df51d7cc30dAffected
LinuxLinux	4.20Affected before 4.20Not affected 5.4.180 through 5.4.Not affected 5.10.101 through 5.10.Not affected 5.15.24 through 5.15.Not affected 5.16.10 through 5.16.Not affected 5.17 and laterNot affected

Product

Versions

LinuxLinux

77266186397c6c782a3f670d32808a9671806ec5 to before 5c5ceea00c8c9df150708e66cb9f2891192c1162Affected
77266186397c6c782a3f670d32808a9671806ec5 to before 0e42c4a3d732517edc3766dd45a14e60d29dd929Affected
77266186397c6c782a3f670d32808a9671806ec5 to before 6207f35c213f6cb2fc3f13b5e77f08c710e1de19Affected
77266186397c6c782a3f670d32808a9671806ec5 to before 1d6cd26605b4d662063a83c15c776b5299a1cb23Affected
77266186397c6c782a3f670d32808a9671806ec5 to before 4db09593af0b0b4d7d4805ebb3273df51d7cc30dAffected

LinuxLinux

4.20Affected
before 4.20Not affected
5.4.180 through 5.4.*Not affected
5.10.101 through 5.10.*Not affected
5.15.24 through 5.15.*Not affected
5.16.10 through 5.16.*Not affected
5.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.