GSD-2022-1007403
scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit 117331a2a5227fb4369c2a1f321d3e3e2e2ef8fe, it was introduced in version v2.6.19 by commit 2908d778ab3e244900c310974e1fc1c69066e450. For more details please see the references link.
What each source reports
OSV No score
scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit 117331a2a5227fb4369c2a1f321d3e3e2e2ef8fe, it was introduced in version v2.6.19 by commit 2908d778ab3e244900c310974e1fc1c69066e450. For more details please see the references link.
- Record
GSD-2022-1007403- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
KernelLinux |
Listed versions, plus commit ranges v2.6.18v2.6.18-rc5v2.6.18-rc6v2.6.18-rc7v2.6.19 Show 45 moreShow lessv2.6.19-rc1v2.6.19-rc2v2.6.19-rc3v2.6.19-rc4v2.6.19-rc5v2.6.19-rc6v2.6.20v2.6.20-rc1v2.6.20-rc2v2.6.20-rc3v2.6.20-rc4v2.6.20-rc5v2.6.20-rc6v2.6.20-rc7v2.6.21v2.6.21-rc1v2.6.21-rc2v2.6.21-rc3v2.6.21-rc4v2.6.21-rc5v2.6.21-rc6v2.6.21-rc7v2.6.22v2.6.22-rc1v2.6.22-rc2v2.6.22-rc3v2.6.22-rc4v2.6.22-rc5v2.6.22-rc6v2.6.22-rc7v2.6.23v2.6.23-rc1v2.6.23-rc2v2.6.23-rc3v2.6.23-rc4v2.6.23-rc5v2.6.23-rc6v2.6.23-rc7v2.6.23-rc8v2.6.23-rc9v2.6.24v2.6.24-rc1v2.6.24-rc2v2.6.24-rc3v2.6.24-rc4 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GSD-2022-1007403 is a vulnerability with no CVSS score yet in Kernel, published November 14, 2022. No source lists public exploit code. No source names a fixed version.
Left out here: 750 versions. The JSON record has them.