CVE-2022-48835
kernel: scsi: mpt3sas: Page fault in reply q processing
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · July 16, 2024
Updated · August 19, 2026
Description
A page fault was observed in the Linux kernel. This is caused by mpt3sas_base_sync_reply_irqs() using an invalid reply_q pointer outside of the list_for_each_entry() loop. At the end of the full list traversal the pointer is invalid. This may lead to a potential loss of Availability.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-825 · Expired Pointer Dereference