Riskcovery

CVE-2021-47473

scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els()

State
Published
Severity
Not scored
Published
May 22, 2024
Updated
May 11, 2026
Reserved
May 22, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els()

Commit 8c0eb596baa5 ("[SCSI] qla2xxx: Fix a memory leak in an error path of qla2x00_process_els()"), intended to change:

bsg_job->request->msgcode == FC_BSG_HST_ELS_NOLOGIN

bsg_job->request->msgcode != FC_BSG_RPT_ELS

but changed it to:

bsg_job->request->msgcode == FC_BSG_RPT_ELS

instead.

Change the == to a != to avoid leaking the fcport structure or freeing unallocated memory.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 8c0eb596baa51f2b43949c698c644727ef17805c to before 96f0aebf29be25254fa585af43924e34aa21fd9aAffected
  • 8c0eb596baa51f2b43949c698c644727ef17805c to before a7fbb56e6c941d9f59437b96412a348e66388d3eAffected
  • 8c0eb596baa51f2b43949c698c644727ef17805c to before 7fb223d0ad801f633c78cbe42b1d1b55f5d163adAffected
LinuxLinux
  • 3.11Affected
  • before 3.11Not affected
  • 5.10.76 through 5.10.*Not affected
  • 5.14.15 through 5.14.*Not affected
  • 5.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.