CVE-2022-49120

scsi: pm8001: Fix task leak in pm8001_send_abort_all()

State: Published
Severity: Not scored
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: pm8001: Fix task leak in pm8001_send_abort_all()

In pm8001_send_abort_all(), make sure to free the allocated sas task if pm8001_tag_alloc() or pm8001_mpi_build_cmd() fail.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	c6b9ef5779c3e1edfa9de949d2a51252bc347663 to before 2051044d7901f1a9d7be95d0d32e53b88e9548f7Affected c6b9ef5779c3e1edfa9de949d2a51252bc347663 to before 2290dcad6f65864dec518fb2d5fb45f67d684150Affected c6b9ef5779c3e1edfa9de949d2a51252bc347663 to before 146cae06d2682d7563732544be334e8e6d3862b8Affected c6b9ef5779c3e1edfa9de949d2a51252bc347663 to before 34c79d16ee69cb53288c202bb1ab0ba0130d9674Affected c6b9ef5779c3e1edfa9de949d2a51252bc347663 to before f90a74892f3acf0cdec5844e90fc8686ca13e7d7Affected
LinuxLinux	3.10Affected before 3.10Not affected 5.10.111 through 5.10.Not affected 5.15.34 through 5.15.Not affected 5.16.20 through 5.16.Not affected 5.17.3 through 5.17.Not affected 5.18 and laterNot affected

Product

Versions

LinuxLinux

c6b9ef5779c3e1edfa9de949d2a51252bc347663 to before 2051044d7901f1a9d7be95d0d32e53b88e9548f7Affected
c6b9ef5779c3e1edfa9de949d2a51252bc347663 to before 2290dcad6f65864dec518fb2d5fb45f67d684150Affected
c6b9ef5779c3e1edfa9de949d2a51252bc347663 to before 146cae06d2682d7563732544be334e8e6d3862b8Affected
c6b9ef5779c3e1edfa9de949d2a51252bc347663 to before 34c79d16ee69cb53288c202bb1ab0ba0130d9674Affected
c6b9ef5779c3e1edfa9de949d2a51252bc347663 to before f90a74892f3acf0cdec5844e90fc8686ca13e7d7Affected

LinuxLinux

3.10Affected
before 3.10Not affected
5.10.111 through 5.10.*Not affected
5.15.34 through 5.15.*Not affected
5.16.20 through 5.16.*Not affected
5.17.3 through 5.17.*Not affected
5.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.