๐Ÿ” CVE Alert

CVE-2022-49053

HIGH 7.8

scsi: target: tcmu: Fix possible page UAF

CVSS Score
7.8
EPSS Score
0.0%
EPSS Percentile
0th

In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcmu: Fix possible page UAF tcmu_try_get_data_page() looks up pages under cmdr_lock, but it does not take refcount properly and just returns page pointer. When tcmu_try_get_data_page() returns, the returned page may have been freed by tcmu_blocks_release(). We need to get_page() under cmdr_lock to avoid concurrent tcmu_blocks_release().

Vendor linux
Product linux
Ecosystems
Industries
Technology
Published Feb 26, 2025
Last Updated May 11, 2026
Stay Ahead of the Next One

Get instant alerts for linux linux

Be the first to know when new high vulnerabilities affecting linux linux are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

Linux / Linux
141685a39151aea95eb56562d2953e919c6c73da < d7c5d79e50be6e06b669141e3db1f977a0dd4e8e 141685a39151aea95eb56562d2953e919c6c73da < e3e0e067d5b34e4a68e3cc55f8eebc413f56f8ed 141685a39151aea95eb56562d2953e919c6c73da < fb7a5115422fbd6a4d505e8844f1ef5529f10489 141685a39151aea95eb56562d2953e919c6c73da < aec36b98a1bbaa84bfd8299a306e4c12314af626 141685a39151aea95eb56562d2953e919c6c73da < b7f3b5d70c834f49f7d87a2f2ed1c6284d9a0322 141685a39151aea95eb56562d2953e919c6c73da < a9564d84ed9f6ee71017d062d0d2182154294a4b 141685a39151aea95eb56562d2953e919c6c73da < a6968f7a367f128d120447360734344d5a3d5336
Linux / Linux
4.12

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
git.kernel.org: https://git.kernel.org/stable/c/d7c5d79e50be6e06b669141e3db1f977a0dd4e8e git.kernel.org: https://git.kernel.org/stable/c/e3e0e067d5b34e4a68e3cc55f8eebc413f56f8ed git.kernel.org: https://git.kernel.org/stable/c/fb7a5115422fbd6a4d505e8844f1ef5529f10489 git.kernel.org: https://git.kernel.org/stable/c/aec36b98a1bbaa84bfd8299a306e4c12314af626 git.kernel.org: https://git.kernel.org/stable/c/b7f3b5d70c834f49f7d87a2f2ed1c6284d9a0322 git.kernel.org: https://git.kernel.org/stable/c/a9564d84ed9f6ee71017d062d0d2182154294a4b git.kernel.org: https://git.kernel.org/stable/c/a6968f7a367f128d120447360734344d5a3d5336