Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: scsi: sd: Fix special_vec mempool leak when scsi_alloc_sgtables() fails sd_set_special_bvec() allocates a special payload page for UNMAP and WRITE SAME commands. If scsi_alloc_sgtables() fails afterward in sd_setup_unmap_cmnd() or sd_setup_write_same{10,16}_cmnd(), the SCSI midlayer does not call uninit_command() because RQF_DONTPREP is not set yet, leaking the page. Call sd_uninit_command() on error, and clear RQF_SPECIAL_PAYLOAD after freeing the page.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 81d926e8b5520e38f1f72dd7bb7cfc81c1a69d87 before 710a2448a06a8215ba8acb4a2791954800f7db0a; affected 81d926e8b5520e38f1f72dd7bb7cfc81c1a69d87 before 744a65e113094756e6c1cfba9ff1bf4247cb68d4; affected 81d926e8b5520e38f1f72dd7bb7cfc81c1a69d87 before e90f746f4ca3896ca560e820b7b6b0a467026938; affected 81d926e8b5520e38f1f72dd7bb7cfc81c1a69d87 before 5d7d1b8b525e5eff33a01d07dfcf7bdd3b6d790d; affected 81d926e8b5520e38f1f72dd7bb7cfc81c1a69d87 before bb31844d88b77138b67aa20c3600203baff40140 |
| Linux / Linux | affected 4.12; unaffected 0 before 4.12; unaffected 6.6.160 through 6.6.*; unaffected 6.12.114 through 6.12.*; unaffected 6.18.57 through 6.18.*; unaffected 7.2.6 through 7.2.*; unaffected 7.3 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/710a2448a06a8215ba8acb4a2791954800f7db0a
- https://git.kernel.org/stable/c/744a65e113094756e6c1cfba9ff1bf4247cb68d4
- https://git.kernel.org/stable/c/e90f746f4ca3896ca560e820b7b6b0a467026938
- https://git.kernel.org/stable/c/5d7d1b8b525e5eff33a01d07dfcf7bdd3b6d790d
- https://git.kernel.org/stable/c/bb31844d88b77138b67aa20c3600203baff40140