Answer in brief
CVE-2022-49118 records a Unknown severity vulnerability in scsi: hisi_sas: Free irq vectors in order for v3 HW. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=e16963f378faf82d307cad2796953f198497c614 <224903cc60d045576393c3b16907742f23e6c740 || >=e16963f378faf82d307cad2796953f198497c614 <f05a0d8de2ea49af36821a20b0b501e20ced937e || >=e16963f378faf82d307cad2796953f198497c614 <8b6eab9d683bae7f88dc894b8c851f866032301c || >=e16963f378faf82d307cad2796953f198497c614 <b4cc04fa8f1fc3816c8494d77abab3f72b9d2292 || >=e16963f378faf82d307cad2796953f198497c614 <554fb72ee34f4732c7f694f56c3c6e67790352a0 | 224903cc60d045576393c3b16907742f23e6c740, f05a0d8de2ea49af36821a20b0b501e20ced937e, 8b6eab9d683bae7f88dc894b8c851f866032301c, b4cc04fa8f1fc3816c8494d77abab3f72b9d2292, 554fb72ee34f4732c7f694f56c3c6e67790352a0 |
| Linux/Linuxgeneric | 5.4 | Not reported |
Published upstream
Feb 26, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 12, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 13, 2026
In the Linux kernel, the following vulnerability has been resolved: scsi: hisi_sas: Free irq vectors in order for v3 HW If the driver probe fails to request the channel IRQ or fatal IRQ, the driver will free the IRQ vectors before freeing the IRQs in free_irq(), and this will cause a kernel BUG like this: ------------[ cut here ]------------ kernel BUG at drivers/pci/msi.c:369! Internal error: Oops - BUG: 0 [#1] PREEMPT SMP Call trace: free_msi_irqs+0x118/0x13c pci_disable_msi+0xfc/0x120 pci_free_irq_vectors+0x24/0x3c hisi_sas_v3_probe+0x360/0x9d0 [hisi_sas_v3_hw] local_pci_probe+0x44/0xb0 work_for_cpu_fn+0x20/0x34 process_one_work+0x1d0/0x340 worker_thread+0x2e0/0x460 kthread+0x180/0x190 ret_from_fork+0x10/0x20 ---[ end trace b88990335b610c11 ]--- So we use devm_add_action() to control the order in which we free the vectors.
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2022-49118 records a Unknown severity vulnerability in scsi: hisi_sas: Free irq vectors in order for v3 HW. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=e16963f378faf82d307cad2796953f198497c614 <224903cc60d045576393c3b16907742f23e6c740 || >=e16963f378faf82d307cad2796953f198497c614 <f05a0d8de2ea49af36821a20b0b501e20ced937e || >=e16963f378faf82d307cad2796953f198497c614 <8b6eab9d683bae7f88dc894b8c851f866032301c || >=e16963f378faf82d307cad2796953f198497c614 <b4cc04fa8f1fc3816c8494d77abab3f72b9d2292 || >=e16963f378faf82d307cad2796953f198497c614 <554fb72ee34f4732c7f694f56c3c6e67790352a0 | 224903cc60d045576393c3b16907742f23e6c740, f05a0d8de2ea49af36821a20b0b501e20ced937e, 8b6eab9d683bae7f88dc894b8c851f866032301c, b4cc04fa8f1fc3816c8494d77abab3f72b9d2292, 554fb72ee34f4732c7f694f56c3c6e67790352a0 |
| Linux/Linuxgeneric | 5.4 | Not reported |
Published upstream
Feb 26, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 12, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 13, 2026
In the Linux kernel, the following vulnerability has been resolved: scsi: hisi_sas: Free irq vectors in order for v3 HW If the driver probe fails to request the channel IRQ or fatal IRQ, the driver will free the IRQ vectors before freeing the IRQs in free_irq(), and this will cause a kernel BUG like this: ------------[ cut here ]------------ kernel BUG at drivers/pci/msi.c:369! Internal error: Oops - BUG: 0 [#1] PREEMPT SMP Call trace: free_msi_irqs+0x118/0x13c pci_disable_msi+0xfc/0x120 pci_free_irq_vectors+0x24/0x3c hisi_sas_v3_probe+0x360/0x9d0 [hisi_sas_v3_hw] local_pci_probe+0x44/0xb0 work_for_cpu_fn+0x20/0x34 process_one_work+0x1d0/0x340 worker_thread+0x2e0/0x460 kthread+0x180/0x190 ret_from_fork+0x10/0x20 ---[ end trace b88990335b610c11 ]--- So we use devm_add_action() to control the order in which we free the vectors.
Quoted source text, attributed separately from HOL analysis.