The vulnerability of the pm8001_chip_reg_dev_req() function in the drivers/scsi/pm8001/pm8001_hwi.c module of the Linux SCSI device support driver allows a hacker to cause a service failure.

🗓️ 10 Feb 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Vulnerability in pm8001_chip_reg_dev_req() in the Linux SCSI pm8001 driver enables uncontrolled resource distribution and service failures.

Reporter	Title	Published	Views	Family All 43
AstraLinux	Astra Linux - уязвимость в linux-5.10	20 May 202605:53	–	astralinux
Circl	CVE-2022-49121	3 Dec 202514:14	–	circl
CNNVD	Linux kernel 安全漏洞	26 Feb 202500:00	–	cnnvd
CVE	CVE-2022-49121	26 Feb 202501:55	–	cve
Cvelist	CVE-2022-49121 scsi: pm8001: Fix tag leaks on error	26 Feb 202501:55	–	cvelist
Debian CVE	CVE-2022-49121	26 Feb 202501:55	–	debiancve
EUVD	EUVD-2022-55093	3 Oct 202520:07	–	euvd
NVD	CVE-2022-49121	26 Feb 202507:00	–	nvd
OpenVAS	SUSE: Security Advisory (SUSE-SU-2025:01600-1)	22 May 202500:00	–	openvas
OpenVAS	SUSE: Security Advisory (SUSE-SU-2025:1027-1)	28 Mar 202500:00	–	openvas

Source	Link
git	www.git.kernel.org/stable/c/43c617eefab7077d69f5989ad3e2a273da1d728b
git	www.git.kernel.org/stable/c/9cc72bcc1c096ed42c91646f130d4b4191580a4c
git	www.git.kernel.org/stable/c/bdc74815f1c39905054b7d47399e0260b201b14d
git	www.git.kernel.org/stable/c/a0bb65eadbf942024226241d9d99fed17168940b
cve	www.cve.org/CVERecord
lore	www.lore.kernel.org/linux-cve-announce/2025022604-CVE-2022-49121-9a82@gregkh/
git	www.git.kernel.org/linus/4c8f04b1905cd4b776d0b720463c091545478ef7
kernel	www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.111
kernel	www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.34
kernel	www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.20

10 Feb 2026 00:00Current

6.3Medium risk

Vulners AI Score6.3

CVSS 24.6

CVSS 35.5

EPSS0.00246

pm8001 chip register resource distribution service failure