CVE-2026-98129

A flaw was found in the Linux kernel's mpi3mr SCSI driver. The driver fails to validate the return value of a memory allocation when adding a Serial Attached SCSI SAS port, leading to a NULL pointer dereference if the allocation fails. A local user could exploit this flaw under low-memory...

PT-2025-18891 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns a resource leak in the Linux kernel's MPI3MR SCSI driver, specifically in the mpi3mr remove function. A missing resource clean up has been identified and addressed...