CVE-2022-50027

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE There is no corresponding free routine if lpfc_sli4_issue_wqe fails to issue the CMF WQE in lpfc_issue_cmf_sync_wqe. If ret_val is non-zero, then free the iocbq request structure.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

History

13 Nov 2025, 19:29

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.5
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: scsi: lpfc: Se corrige una posible fuga de memoria al no emitir la WQE de CMF. No existe una rutina de liberación correspondiente si lpfc_sli4_issue_wqe no emite la WQE de CMF en lpfc_issue_cmf_sync_wqe. Si ret_val es distinto de cero, se libera la estructura de solicitud iocbq.
References () https://git.kernel.org/stable/c/2f67dc7970bce3529edce93a0a14234d88b3fcd5 - () https://git.kernel.org/stable/c/2f67dc7970bce3529edce93a0a14234d88b3fcd5 - Patch
References () https://git.kernel.org/stable/c/4eb7a1beff03836d3df271cd23b790884e3facb9 - () https://git.kernel.org/stable/c/4eb7a1beff03836d3df271cd23b790884e3facb9 - Patch
References () https://git.kernel.org/stable/c/9c8e2e607270a368834a0ef72aa82d970f89c596 - () https://git.kernel.org/stable/c/9c8e2e607270a368834a0ef72aa82d970f89c596 - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
CWE CWE-401

18 Jun 2025, 11:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-06-18 11:15

Updated : 2025-11-13 19:29


NVD link : CVE-2022-50027

Mitre link : CVE-2022-50027

CVE.ORG link : CVE-2022-50027


JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime