CVE-2022-49126

In the Linux kernel, the following vulnerability has been resolved:

scsi: mpi3mr: Fix memory leaks

Fix memory leaks related to operational reply queue's memory segments which are not getting freed while unloading the driver.

This vulnerability is rated as having a Moderate impact because exploiting it requires privileged administrative access to unload kernel modules or physically detach storage devices, restricting the blast radius to a local denial of service via memory exhaustion. The issue is confined to systems utilizing Broadcom MPI3 storage controller hardware where the corresponding driver is repeatedly unloaded. Standard Red Hat Enterprise Linux installations that do not use this specialized storage hardware or do not dynamically unload storage drivers are not exposed to resource depletion from this flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.