{"id":"DEBIAN-CVE-2022-50532","details":"In the Linux kernel, the following vulnerability has been resolved:  scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()  In mpt3sas_transport_port_add(), if sas_rphy_add() returns error, sas_rphy_free() needs be called to free the resource allocated in sas_end_device_alloc(). Otherwise a kernel crash will happen:  Unable to handle kernel NULL pointer dereference at virtual address 0000000000000108 CPU: 45 PID: 37020 Comm: bash Kdump: loaded Tainted: G        W          6.1.0-rc1+ #189 pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : device_del+0x54/0x3d0 lr : device_del+0x37c/0x3d0 Call trace:  device_del+0x54/0x3d0  attribute_container_class_device_del+0x28/0x38  transport_remove_classdev+0x6c/0x80  attribute_container_device_trigger+0x108/0x110  transport_remove_device+0x28/0x38  sas_rphy_remove+0x50/0x78 [scsi_transport_sas]  sas_port_delete+0x30/0x148 [scsi_transport_sas]  do_sas_phy_delete+0x78/0x80 [scsi_transport_sas]  device_for_each_child+0x68/0xb0  sas_remove_children+0x30/0x50 [scsi_transport_sas]  sas_rphy_remove+0x38/0x78 [scsi_transport_sas]  sas_port_delete+0x30/0x148 [scsi_transport_sas]  do_sas_phy_delete+0x78/0x80 [scsi_transport_sas]  device_for_each_child+0x68/0xb0  sas_remove_children+0x30/0x50 [scsi_transport_sas]  sas_remove_host+0x20/0x38 [scsi_transport_sas]  scsih_remove+0xd8/0x420 [mpt3sas]  Because transport_add_device() is not called when sas_rphy_add() fails, the device is not added. When sas_rphy_remove() is subsequently called to remove the device in the remove() path, a NULL pointer dereference happens.","modified":"2026-09-01T16:05:35.539552860Z","published":"2025-10-07T16:15:37.273Z","upstream":["CVE-2022-50532"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2022-50532"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.4-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2022-50532.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.4-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2022-50532.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.4-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2022-50532.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}