CVE-2022-49082

The Linux kernel contains a use-after-free vulnerability in the _scsih_expander_node_remove() function within the mpt3sas driver (located in drivers/scsi/mpt3sas/mpt3sas_scsih.c). The issue occurs because mpt3sas_transport_port_remove() frees the port field of the sas_expander structure, which is...

PT-2021-26857

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.257 Description A potential issue exists in the Linux Kernel, specifically in the mpt3sas scsi driver, which could lead to a kernel panic during a drive power cycle test. The actual impact and attack...