CVE-2022-50768

In the Linux kernel, the following vulnerability has been resolved:

scsi: smartpqi: Correct device removal for multi-actuator devices

Correct device count for multi-actuator drives which can cause kernel panics.

smartpqi device removal for multi actuator drives could crash the kernel because the driver used an incorrect LUN count and could treat a device as having zero LUNs. This breaks the removal and pending IO wait logic and can result in premature teardown of shared device structures while other logical units still exist. The CVSS has a PR:L and assumes a local user can trigger device rescan or removal events through storage management interfaces in some environments. In most deployments such operations require administrative privileges. The issue is tied to local storage controller events such as hot remove, reset, or device reenumeration.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.