CVE-2022-49126: scsi: mpi3mr: Fix memory leaks
Published Feb 26, 2025
·Updated
In the Linux kernel, the following vulnerability has been resolved:
scsi: mpi3mr: Fix memory leaks
Fix memory leaks related to operational reply queue's memory segments which are not getting freed while unloading the driver.
Affected Software
4 affected components
Linux Linux kernel
Linux Linux kernel<5.15.34
Linux Linux kernel>=5.16<5.16.20
Linux Linux kernel>=5.17<5.17.3
Event History
Feb 26, 2025
CVE Published
via MITRE·01:55 AM
Data Sourced
via MITRE·01:55 AM
Description
Data Sourced
via NVD·07:00 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
Who is exposed to this issue?
Systems running the Linux kernel with the mpi3mr SCSI driver in use are exposed. The issue occurs when that driver is unloaded.
2
What access does an attacker need to exploit it?
The CVSS vector indicates local access with low privileges is required, and no user interaction is needed. The reported impact is denial of service through memory leaks, with no stated confidentiality or integrity impact.
3
What can be done if patching is not immediately possible?
Avoid unloading the mpi3mr driver where operational reply queue memory segments may have been allocated. This reduces exposure to the described memory leak during driver unload.