CVE-2022-49126: scsi: mpi3mr: Fix memory leaks

Q: Who is exposed to this issue?

Systems running the Linux kernel with the mpi3mr SCSI driver in use are exposed. The issue occurs when that driver is unloaded.

Q: What access does an attacker need to exploit it?

The CVSS vector indicates local access with low privileges is required, and no user interaction is needed. The reported impact is denial of service through memory leaks, with no stated confidentiality or integrity impact.

Q: What can be done if patching is not immediately possible?

Avoid unloading the mpi3mr driver where operational reply queue memory segments may have been allocated. This reduces exposure to the described memory leak during driver unload.

Published Feb 26, 2025

Updated

In the Linux kernel, the following vulnerability has been resolved:

scsi: mpi3mr: Fix memory leaks

Fix memory leaks related to operational reply queue's memory segments which are not getting freed while unloading the driver.

Affected Software

4 affected components

Linux Linux kernel

Linux Linux kernel<5.15.34

Linux Linux kernel>=5.16<5.16.20

Linux Linux kernel>=5.17<5.17.3

Event History

Feb 26, 2025

CVE Published

via MITRE·01:55 AM

Data Sourced

via MITRE·01:55 AM

Description

Data Sourced

via NVD·07:00 AM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

Who is exposed to this issue?

Systems running the Linux kernel with the mpi3mr SCSI driver in use are exposed. The issue occurs when that driver is unloaded.

What access does an attacker need to exploit it?

The CVSS vector indicates local access with low privileges is required, and no user interaction is needed. The reported impact is denial of service through memory leaks, with no stated confidentiality or integrity impact.

What can be done if patching is not immediately possible?

Avoid unloading the mpi3mr driver where operational reply queue memory segments may have been allocated. This reduces exposure to the described memory leak during driver unload.

CVE-2022-49126: scsi: mpi3mr: Fix memory leaks

Affected Software

Event History

Frequently Asked Questions

Who is exposed to this issue?

What access does an attacker need to exploit it?

What can be done if patching is not immediately possible?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What access does an attacker need to exploit it?

What can be done if patching is not immediately possible?