CVE-2022-50646
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: hpsa: Fix possible memory leak in hpsa_init_one() The hpda_alloc_ctlr_info() allocates h and its field reply_map. However, in hpsa_init_one(), if alloc_percpu() failed, the hpsa_init_one() jumps to clean1 directly, which frees h and leaks the h->reply_map. Fix by calling hpda_free_ctlr_info() to release h->replay_map and h instead free h directly.
How to fix
- Linux Linuxf4d1c14e8b404766ff2bb8644bb19443d73965de, f8fc2f18652917cdcc89cb23f3a1b7cb6e119c5e, c808edbf580bfc454671cbe66e9d7c2e938e7601, bfe10a1d9fbccdf39f8449d62509f070d8aaaac1, fc998d0a7d65672f0812f11cd0ec4bbe4f8f8507, 0aa7be66168b1e84b2581ffff3ccb54a6c804a1e, 9c9ff300e0de07475796495d86f449340d454a0c, 4.15 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef ≤ v < f4d1c14e8b404766ff2bb8644bb19443d73965de, 8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef ≤ v < f8fc2f18652917cdcc89cb23f3a1b7cb6e119c5e, 8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef ≤ v < c808edbf580bfc454671cbe66e9d7c2e938e7601, 8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef ≤ v < bfe10a1d9fbccdf39f8449d62509f070d8aaaac1, 8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef ≤ v < fc998d0a7d65672f0812f11cd0ec4bbe4f8f8507, 8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef ≤ v < 0aa7be66168b1e84b2581ffff3ccb54a6c804a1e, 8b834bff1b73dce46f4e9f5e84af6f73fed8b0ef ≤ v < 9c9ff300e0de07475796495d86f449340d454a0c, 1edd825c11f8ed2c409d6fb6b3d90a042cbf738d, 4.14.63 ≤ v < 4.15, 4.16 | f4d1c14e8b404766ff2bb8644bb19443d73965de, f8fc2f18652917cdcc89cb23f3a1b7cb6e119c5e, c808edbf580bfc454671cbe66e9d7c2e938e7601, bfe10a1d9fbccdf39f8449d62509f070d8aaaac1, fc998d0a7d65672f0812f11cd0ec4bbe4f8f8507, 0aa7be66168b1e84b2581ffff3ccb54a6c804a1e, 9c9ff300e0de07475796495d86f449340d454a0c, 4.15 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.