CVE-2026-98129

In the Linux kernel, the following vulnerability has been resolved:

scsi: mpi3mr: Fix NULL pointer dereference in mpi3mr sas port add()

sas port alloc num() can return NULL on memory allocation failure. The return value is passed directly to sas port add() without a NULL check, which causes a NULL pointer dereference.

Additionally, if sas port add() fails, the allocated port is not freed before jumping to out fail, leaking the sas port structure. Call sas port free() to properly release it.