CVE-2022-50646

Summary

In the Linux kernel, the following vulnerability has been resolved:

scsi: hpsa: Fix possible memory leak in hpsa_init_one()

The hpda_alloc_ctlr_info() allocates h and its field reply_map. However, in hpsa_init_one(), if alloc_percpu() failed, the hpsa_init_one() jumps to clean1 directly, which frees h and leaks the h->reply_map.

Fix by calling hpda_free_ctlr_info() to release h->replay_map and h instead free h directly.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef < f4d1c14e8b404766ff2bb8644bb19443d73965deaffected
LinuxLinux8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef < f8fc2f18652917cdcc89cb23f3a1b7cb6e119c5eaffected
LinuxLinux8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef < c808edbf580bfc454671cbe66e9d7c2e938e7601affected
LinuxLinux8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef < bfe10a1d9fbccdf39f8449d62509f070d8aaaac1affected
LinuxLinux8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef < fc998d0a7d65672f0812f11cd0ec4bbe4f8f8507affected
LinuxLinux8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef < 0aa7be66168b1e84b2581ffff3ccb54a6c804a1eaffected
LinuxLinux8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef < 9c9ff300e0de07475796495d86f449340d454a0caffected
LinuxLinux1edd825c11f8ed2c409d6fb6b3d90a042cbf738daffected
LinuxLinux4.14.63 < 4.15affected
LinuxLinux4.16affected
LinuxLinux0 < 4.16unaffected
LinuxLinux4.19.270 <= 4.19.*unaffected
LinuxLinux5.4.229 <= 5.4.*unaffected
LinuxLinux5.10.163 <= 5.10.*unaffected
LinuxLinux5.15.86 <= 5.15.*unaffected
LinuxLinux6.0.16 <= 6.0.*unaffected
LinuxLinux6.1.2 <= 6.1.*unaffected
LinuxLinux6.2 <= *unaffected

Weaknesses

References