CVE-2022-50818

A flaw was found in the Linux kernel's pm8001 SCSI driver. When internal abort commands complete, the running_req counter is not decremented, causing the counter to never reach zero. This leads to a system hang when disabling the remote PHY for a SATA disk, as pm8001_dev_gone_notify() waits indefinitely for running_req to become zero.

This is a driver-specific bug affecting systems with PMC-Sierra SAS/SATA HBA controllers. The flaw manifests only during specific device removal operations when disabling a SATA disk's PHY, making it a limited-scope denial of service issue requiring local access and specific hardware.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.