Linux Kernel SCSI PM8001 Driver Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the Linux kernel's SCSI PM8001 driver. The issue arises in the 'pm8001_send_abort_all()' function, where the 'n_elem' field of the command control block (CCB) is not properly initialized. This oversight can lead to the task completion process encountering a CCB with a non-zero 'n_elem', which in turn causes invalid 'dma_unmap_sg()' calls. These erroneous calls can result in a system crash.

Impact

Exploitation of this vulnerability leads to a system crash, caused by invalid DMA unmapping operations that disrupt normal processing.