CVE-2022-50646

scsi: hpsa: Fix possible memory leak in hpsa_init_one()

State: Published
Severity: Not scored
Published: Dec 9, 2025
Updated: May 23, 2026
Reserved: Dec 8, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: hpsa: Fix possible memory leak in hpsa_init_one()

The hpda_alloc_ctlr_info() allocates h and its field reply_map. However, in hpsa_init_one(), if alloc_percpu() failed, the hpsa_init_one() jumps to clean1 directly, which frees h and leaks the h->reply_map.

Fix by calling hpda_free_ctlr_info() to release h->replay_map and h instead free h directly.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef to before f4d1c14e8b404766ff2bb8644bb19443d73965deAffected 8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef to before f8fc2f18652917cdcc89cb23f3a1b7cb6e119c5eAffected 8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef to before c808edbf580bfc454671cbe66e9d7c2e938e7601Affected 8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef to before bfe10a1d9fbccdf39f8449d62509f070d8aaaac1Affected 8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef to before fc998d0a7d65672f0812f11cd0ec4bbe4f8f8507Affected 8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef to before 0aa7be66168b1e84b2581ffff3ccb54a6c804a1eAffected 8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef to before 9c9ff300e0de07475796495d86f449340d454a0cAffected 1edd825c11f8ed2c409d6fb6b3d90a042cbf738dAffected 4.14.63 to before 4.15Affected
LinuxLinux	4.16Affected before 4.16Not affected 4.19.270 through 4.19.Not affected 5.4.229 through 5.4.Not affected 5.10.163 through 5.10.Not affected 5.15.86 through 5.15.Not affected 6.0.16 through 6.0.Not affected 6.1.2 through 6.1.Not affected 6.2 and laterNot affected

Product

Versions

LinuxLinux

8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef to before f4d1c14e8b404766ff2bb8644bb19443d73965deAffected
8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef to before f8fc2f18652917cdcc89cb23f3a1b7cb6e119c5eAffected
8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef to before c808edbf580bfc454671cbe66e9d7c2e938e7601Affected
8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef to before bfe10a1d9fbccdf39f8449d62509f070d8aaaac1Affected
8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef to before fc998d0a7d65672f0812f11cd0ec4bbe4f8f8507Affected
8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef to before 0aa7be66168b1e84b2581ffff3ccb54a6c804a1eAffected
8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef to before 9c9ff300e0de07475796495d86f449340d454a0cAffected
1edd825c11f8ed2c409d6fb6b3d90a042cbf738dAffected
4.14.63 to before 4.15Affected

LinuxLinux

4.16Affected
before 4.16Not affected
4.19.270 through 4.19.*Not affected
5.4.229 through 5.4.*Not affected
5.10.163 through 5.10.*Not affected
5.15.86 through 5.15.*Not affected
6.0.16 through 6.0.*Not affected
6.1.2 through 6.1.*Not affected
6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.