Fix resource leak in case of probe failure in scsi: megaraid_sas
Summary
GSD-2021-1001201: scsi: megaraid_sas: Fix resource leak in case of probe failure. Affects Kernel versions < e623f79691c5104317669ab36ec316a90c05062f. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The scsi: megaraid_sas package is a SCSI host bus adapter driver for the MegaRAID SAS family of RAID controllers. It provides support for managing and controlling SCSI devices connected to these controllers. The package is a part of the Linux Kernel ecosystem.
Vulnerability Detail
The vulnerability in scsi: megaraid_sas occurs in the probe failure scenario. When the probe fails, there is a resource leak that can lead to potential security issues. The exact impact and attack plausibility of this vulnerability have not been proven yet. It is important to note that this vulnerability has been fixed in Linux Kernel version v5.13.4 by commit e623f79691c5104317669ab36ec316a90c05062f.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The scsi: megaraid_sas package in the Linux Kernel is vulnerable to a resource leak in case of probe failure. To address this vulnerability, it is crucial to update the package to the latest version, specifically Linux Kernel v5.13.4 or later. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
scsi: megaraid_sas is a SCSI host bus adapter driver for the MegaRAID SAS family of RAID controllers in the Linux Kernel ecosystem. It provides support for managing and controlling SCSI devices connected to these controllers.
The impact of this vulnerability is not yet proven. However, it is important to address the resource leak in case of probe failure to prevent potential security issues.
To fix this vulnerability, update the scsi: megaraid_sas package to the latest version available, which includes the fix. Upgrade to Linux Kernel version v5.13.4 or later.
No specific workaround has been mentioned for this vulnerability. It is recommended to apply the fix by updating the package.
You can find more information about this vulnerability in the Open Source Vulnerability Database (OSVDB) entry GSD-2021-1001201.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
