Improper locking in Linux kernel scsi pm8001 driver

1) Improper locking

EUVDB-ID: #VU104712

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-49217

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the pm80xx_send_abort_all() function in drivers/scsi/pm8001/pm80xx_hwi.c, within the pm8001_send_abort_all() and pm8001_send_read_log() functions in drivers/scsi/pm8001/pm8001_hwi.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

CPE2.3

• cpe:2.3:o:linux_foundation:linux_kernel:*:*:*:*:*:*:*:*

External links

https://git.kernel.org/stable/c/16cd02e0951b520bef324adb9a35afcc92501caf
https://git.kernel.org/stable/c/1824a21b2cedc5774a5adfa74f5f7b90472d8677
https://git.kernel.org/stable/c/279f318bd7d6e04e6e0bc7b8cd8e190da8fa37a4
https://git.kernel.org/stable/c/326d894adf89f3c707b7784becbe241830daaab6
https://git.kernel.org/stable/c/765674e3b30121782a2b792684554baa48c61f5e
https://git.kernel.org/stable/c/7f12845c8389855dbcc67baa068b6832dc4a396e
https://git.kernel.org/stable/c/9914461db82caee6c519acfbe10a86fe11bcdeca
https://git.kernel.org/stable/c/c8db786858d895ac58342f67767b4999ae6538fa
https://git.kernel.org/stable/c/d6ec4471550cc53e96485a7124c5891e6a38d1c3

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.