CVE-2022-49217: 
Linux Kernel vulnerability analysis and mitigation

In the Linux kernel, a vulnerability was discovered in the SCSI pm8001 driver where the n_elem field of the ccb (Command Control Block) used in pm80xx_send_abort_all() was not initialized to 0. This vulnerability has been assigned CVE-2022-49217 (Kernel Git).

The missing initialization could lead to the task completion path seeing the ccb with a non-zero n_elem value, resulting in the execution of invalid dma_unmap_sg() calls in pm8001_ccb_task_free(). This vulnerability was introduced by commit c6b9ef5779c3 ("[SCSI] pm80xx: NCQ error handling changes") (Kernel Git).

When exploited, this vulnerability causes a system crash due to invalid memory operations. The crash occurs during the execution of dma_unmap_sg() calls with invalid parameters (Kernel Git).

The vulnerability can be triggered during normal system operation when using the pm8001 SCSI driver, particularly during abort operations. The issue manifests through regular driver usage rather than requiring specific exploit conditions (Kernel Git).

The fix involves initializing the ccb n_elem field to 0 in three functions: pm8001_send_abort_all(), pm8001_send_read_log(), and pm80xx_send_abort_all(). This patch has been merged into the Linux kernel (Kernel Git).