Description
In the Linux kernel, the following vulnerability has been resolved: scsi: sd: Fix special_vec mempool leak when scsi_alloc_sgtables() fails sd_set_special_bvec() allocates a special payload page for UNMAP and WRITE SAME commands. If scsi_alloc_sgtables() fails afterward in sd_setup_unmap_cmnd() or sd_setup_write_same{10,16}_cmnd(), the SCSI midlayer does not call uninit_command() because RQF_DONTPREP is not set yet, leaking the page. Call sd_uninit_command() on error, and clear RQF_SPECIAL_PAYLOAD after freeing the page.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
81d926e8b5520e38f1f72dd7bb7cfc81c1a69d87 to < 05bc68669549bfddfdeef2fd119855cab3e9615aaffected81d926e8b5520e38f1f72dd7bb7cfc81c1a69d87 to < 710a2448a06a8215ba8acb4a2791954800f7db0aaffected81d926e8b5520e38f1f72dd7bb7cfc81c1a69d87 to < 744a65e113094756e6c1cfba9ff1bf4247cb68d4affected81d926e8b5520e38f1f72dd7bb7cfc81c1a69d87 to < e90f746f4ca3896ca560e820b7b6b0a467026938affected81d926e8b5520e38f1f72dd7bb7cfc81c1a69d87 to < 5d7d1b8b525e5eff33a01d07dfcf7bdd3b6d790daffected81d926e8b5520e38f1f72dd7bb7cfc81c1a69d87 to < bb31844d88b77138b67aa20c3600203baff40140affected
Linux Linux
Default version status: affected
4.12affected0 to < 4.12unaffected6.1.191 to ≤ 6.1.*unaffected6.6.160 to ≤ 6.6.*unaffected6.12.114 to ≤ 6.12.*unaffected6.18.57 to ≤ 6.18.*unaffected7.2.6 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/05bc68669549bfddfdeef2fd119855cab3e9615a ↗
- https://git.kernel.org/stable/c/710a2448a06a8215ba8acb4a2791954800f7db0a ↗
- https://git.kernel.org/stable/c/744a65e113094756e6c1cfba9ff1bf4247cb68d4 ↗
- https://git.kernel.org/stable/c/e90f746f4ca3896ca560e820b7b6b0a467026938 ↗
- https://git.kernel.org/stable/c/5d7d1b8b525e5eff33a01d07dfcf7bdd3b6d790d ↗
- https://git.kernel.org/stable/c/bb31844d88b77138b67aa20c3600203baff40140 ↗