{"attribution":"This product uses data from the NVD API but is not endorsed or certified by the NVD.","cve":{"id":"CVE-2026-98129","sourceIdentifier":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","published":"2026-09-25T11:17:44.270","lastModified":"2026-10-22T15:10:31.867","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: mpi3mr: Fix NULL pointer dereference in mpi3mr_sas_port_add()\n\nsas_port_alloc_num() can return NULL on memory allocation failure. The\nreturn value is passed directly to sas_port_add() without a NULL check,\nwhich causes a NULL pointer dereference.\n\nAdditionally, if sas_port_add() fails, the allocated port is not freed\nbefore jumping to out_fail, leaking the sas_port structure. Call\nsas_port_free() to properly release it."}],"affected":[{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","affectedData":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/scsi/mpi3mr/mpi3mr_transport.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"e22bae30667a7e74ed057e00fb6e8c79e0738de3","lessThan":"7e3489b5950e7668355762968a7c7f75fe9bc80d","versionType":"git","status":"affected"},{"version":"e22bae30667a7e74ed057e00fb6e8c79e0738de3","lessThan":"c848a1bbe110496eff8dcdf7cfbff66a69edae89","versionType":"git","status":"affected"},{"version":"e22bae30667a7e74ed057e00fb6e8c79e0738de3","lessThan":"5c50137ba11b6e20e7074303dae35ff58d5a0b6f","versionType":"git","status":"affected"},{"version":"e22bae30667a7e74ed057e00fb6e8c79e0738de3","lessThan":"2f69ed909de9e3d46af9db7dd24b9b80dc31b5ec","versionType":"git","status":"affected"},{"version":"e22bae30667a7e74ed057e00fb6e8c79e0738de3","lessThan":"5cb58b052cf09dd8e88d92c1d649b3eea5c95d4d","versionType":"git","status":"affected"},{"version":"e22bae30667a7e74ed057e00fb6e8c79e0738de3","lessThan":"dba9e2181ca5e875f98b8b9b4535cdaab87dcb0d","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/scsi/mpi3mr/mpi3mr_transport.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"6.1","status":"affected"},{"version":"0","lessThan":"6.1","versionType":"semver","status":"unaffected"},{"version":"6.1.189","lessThanOrEqual":"6.1.*","versionType":"semver","status":"unaffected"},{"version":"6.6.158","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.111","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.53","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.2.7","lessThanOrEqual":"7.2.*","versionType":"semver","status":"unaffected"},{"version":"7.3","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1","versionEndExcluding":"6.1.189","matchCriteriaId":"A08955FE-5938-4F5B-B6A0-BEA8BA740A26"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2","versionEndExcluding":"6.6.158","matchCriteriaId":"575D98F4-AE0C-4D1F-91BC-CD1C75F0FED0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.7","versionEndExcluding":"6.12.111","matchCriteriaId":"47BC31C9-3D9E-4B96-B5F8-291D6AD55D81"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.13","versionEndExcluding":"6.18.53","matchCriteriaId":"7561AABB-6D5A-4324-BC66-C6C6B012AFD8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.19","versionEndExcluding":"7.2.7","matchCriteriaId":"19917B2D-B4B2-4416-A482-9C7C4929A921"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:7.3:rc1:*:*:*:*:*:*","matchCriteriaId":"11E35E1B-5DB4-4AB9-9706-CD73B799EADF"}]}]}],"references":[{"url":"https://git.kernel.org/stable/c/2f69ed909de9e3d46af9db7dd24b9b80dc31b5ec","source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"]},{"url":"https://git.kernel.org/stable/c/5c50137ba11b6e20e7074303dae35ff58d5a0b6f","source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"]},{"url":"https://git.kernel.org/stable/c/5cb58b052cf09dd8e88d92c1d649b3eea5c95d4d","source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"]},{"url":"https://git.kernel.org/stable/c/7e3489b5950e7668355762968a7c7f75fe9bc80d","source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"]},{"url":"https://git.kernel.org/stable/c/c848a1bbe110496eff8dcdf7cfbff66a69edae89","source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"]},{"url":"https://git.kernel.org/stable/c/dba9e2181ca5e875f98b8b9b4535cdaab87dcb0d","source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"]}]}}