In the Linux kernel, the following vulnerability has been resolved:
scsi: pm8001: Fix tag leaks on error
In pm8001chipsetdevstatereq(), pm8001chipfwflashupdatereq(), pm80xxchipphyctlreq() and pm8001chipregdevreq() add missing calls to pm8001tagfree() to free the allocated tag when pm8001mpibuild_cmd() fails.
Similarly, in pm8001execinternaltaskabort(), if the chip ->taskabort method fails, the tag allocated for the abort request task must be freed. Add the missing call to pm8001tag_free().