CVE-2022-49839

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> scsi: scsi_transport_sas: Fix error handling in sas_phy_add()<br /> <br /> If transport_add_device() fails in sas_phy_add(), the kernel will crash<br /> trying to delete the device in transport_remove_device() called from<br /> sas_remove_host().<br /> <br /> Unable to handle kernel NULL pointer dereference at virtual address 0000000000000108<br /> CPU: 61 PID: 42829 Comm: rmmod Kdump: loaded Tainted: G W 6.1.0-rc1+ #173<br /> pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)<br /> pc : device_del+0x54/0x3d0<br /> lr : device_del+0x37c/0x3d0<br /> Call trace:<br /> device_del+0x54/0x3d0<br /> attribute_container_class_device_del+0x28/0x38<br /> transport_remove_classdev+0x6c/0x80<br /> attribute_container_device_trigger+0x108/0x110<br /> transport_remove_device+0x28/0x38<br /> sas_phy_delete+0x30/0x60 [scsi_transport_sas]<br /> do_sas_phy_delete+0x6c/0x80 [scsi_transport_sas]<br /> device_for_each_child+0x68/0xb0<br /> sas_remove_children+0x40/0x50 [scsi_transport_sas]<br /> sas_remove_host+0x20/0x38 [scsi_transport_sas]<br /> hisi_sas_remove+0x40/0x68 [hisi_sas_main]<br /> hisi_sas_v2_remove+0x20/0x30 [hisi_sas_v2_hw]<br /> platform_remove+0x2c/0x60<br /> <br /> Fix this by checking and handling return value of transport_add_device()<br /> in sas_phy_add().