CVE-2022-50840scsi: snic: Fix possible UAF in snic_tgt_create()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: scsi: snic: Fix possible UAF in snic_tgt_create() Smatch reports a warning as follows: drivers/scsi/snic/snic_disc.c:307 snic_tgt_create() warn: '&tgt->list' not removed from list If device_add() fails in snic_tgt_create(), tgt will be freed, but tgt->list will not be removed from snic->disc.tgt_list, then list traversal may cause UAF. Remove from snic->disc.tgt_list before free().
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Deferred
- Record last updated
- May 11, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from c8806b6c9e824f47726f2a9b7fbbe7ebf19306fa before f9d8b8ba0f1a16cde0b1fc9e80466df76b6db8ff; from c8806b6c9e824f47726f2a9b7fbbe7ebf19306fa before 3772319e40527e6a5f2ec1d729e01f271d818f5c; from c8806b6c9e824f47726f2a9b7fbbe7ebf19306fa before 3007f96ca20c848d0b1b052df6d2cb5ae5586e78; from c8806b6c9e824f47726f2a9b7fbbe7ebf19306fa before 6866154c23fba40888ad6d554cccd4bf2edb755e; from c8806b6c9e824f47726f2a9b7fbbe7ebf19306fa before ad27f74e901fc48729733c88818e6b96c813057d; from c8806b6c9e824f47726f2a9b7fbbe7ebf19306fa before 1895e908b3ae66a5312fd1b2cdda2da82993dca7; from c8806b6c9e824f47726f2a9b7fbbe7ebf19306fa before c7f0f8dab1ae5def57c1a8a9cafd6fabe1dc27cc; from c8806b6c9e824f47726f2a9b7fbbe7ebf19306fa before 4141cd9e8b3379aea52a85d2c35f6eaf26d14e86; and 1 more ranges | CNA record |
References
- https://git.kernel.org/stable/c/f9d8b8ba0f1a16cde0b1fc9e80466df76b6db8ff
- https://git.kernel.org/stable/c/3772319e40527e6a5f2ec1d729e01f271d818f5c
- https://git.kernel.org/stable/c/3007f96ca20c848d0b1b052df6d2cb5ae5586e78
- https://git.kernel.org/stable/c/6866154c23fba40888ad6d554cccd4bf2edb755e
- https://git.kernel.org/stable/c/ad27f74e901fc48729733c88818e6b96c813057d
- https://git.kernel.org/stable/c/1895e908b3ae66a5312fd1b2cdda2da82993dca7
- https://git.kernel.org/stable/c/c7f0f8dab1ae5def57c1a8a9cafd6fabe1dc27cc
- https://git.kernel.org/stable/c/4141cd9e8b3379aea52a85d2c35f6eaf26d14e86
- https://git.kernel.org/stable/c/e118df492320176af94deec000ae034cc92be754
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.