CVE-2022-49839: scsi: scsi_transport_sas: Fix error handling in sas_phy_add()
In the Linux kernel, the following vulnerability has been resolved:
scsi: scsitransportsas: Fix error handling in sasphyadd()
If transportadddevice() fails in sasphyadd(), the kernel will crash trying to delete the device in transportremovedevice() called from sasremovehost().
Unable to handle kernel NULL pointer dereference at virtual address 0000000000000108 CPU: 61 PID: 42829 Comm: rmmod Kdump: loaded Tainted: G W 6.1.0-rc1+ #173 pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : devicedel+0x54/0x3d0 lr : devicedel+0x37c/0x3d0 Call trace: devicedel+0x54/0x3d0 attributecontainerclassdevicedel+0x28/0x38 transportremoveclassdev+0x6c/0x80 attributecontainerdevicetrigger+0x108/0x110 transportremovedevice+0x28/0x38 sasphydelete+0x30/0x60 [scsitransportsas] dosasphydelete+0x6c/0x80 [scsitransportsas] deviceforeachchild+0x68/0xb0 sasremovechildren+0x40/0x50 [scsitransportsas] sasremovehost+0x20/0x38 [scsitransportsas] hisisasremove+0x40/0x68 [hisisasmain] hisisasv2remove+0x20/0x30 [hisisasv2hw] platformremove+0x2c/0x60
Fix this by checking and handling return value of transportadddevice() in sasphyadd().
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49839?
CVE-2022-49839 is critical as it can lead to a kernel crash when handling SCSI transport errors.
How do I fix CVE-2022-49839?
To fix CVE-2022-49839, upgrade the Linux kernel to a version that includes the patch for this vulnerability.
Which versions of the Linux kernel are affected by CVE-2022-49839?
CVE-2022-49839 affects Linux kernel versions between 2.6.14 and 5.10.157, as well as several versions from 5.11 up to and including 6.1-rc4.
What causes the vulnerability CVE-2022-49839?
CVE-2022-49839 is caused by improper error handling in the sas_phy_add() function of the SCSI transport layer.
When was CVE-2022-49839 resolved?
CVE-2022-49839 was resolved with updates in the Linux kernel stable releases.