Linux Kernel SCSI mpt3sas NULL Pointer Dereference Vulnerability

A vulnerability in the Linux kernel's SCSI mpt3sas driver can lead to a NULL pointer dereference, causing a kernel crash. This issue occurs in the 'mpt3sas_transport_port_add()' function when 'sas_rphy_add()' fails. The failure to properly handle the error by freeing allocated resources results in a crash when the system attempts to remove the device.

Impact

Exploitation of this vulnerability causes a kernel crash due to a NULL pointer dereference, disrupting system operations and potentially leading to a denial of service.

Reproduction

To reproduce this vulnerability, add a SCSI device using the mpt3sas driver and simulate an error during the 'sas_rphy_add()' process. This can be done by modifying the driver to return an error when adding the SCSI device, which will trigger the resource leak and subsequent NULL pointer dereference when the device is removed.

Remediation

Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.