Yihang Li

**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The vulnerability is related to the `hisi sas` component in the Linux kernel. It occurs when the `init debugfs` fails during device registration due to memory allocation failure, causing `debugfs remove recursive()` to be called without setting `debugfs dir` to NULL. As a result, `debugfs remove recursive()` is called again during device removal, leading to an illegal pointer access. This can cause a kernel NULL pointer dereference, resulting in a denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.