CVE-2022-49114

scsi: libfc: Fix use after free in fc_exch_abts_resp()

State: Published
Severity: 8.8 High
Published: Feb 26, 2025
Updated: Aug 5, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: libfc: Fix use after free in fc_exch_abts_resp()

fc_exch_release(ep) will decrease the ep's reference count. When the reference count reaches zero, it is freed. But ep is still used in the following code, which will lead to a use after free.

Return after the fc_exch_release() call to avoid use after free.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-416 Use After Free

Affected Products

Product	Versions
LinuxLinux	42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to before 4a131d4ea8b581ac9b01d3a72754db4848be3232Affected 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to before 499d198494e77b6533251b9b909baf5c101129cbAffected 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to before 6044ad64f41c87382cfeeca281573d1886d80cbeAffected 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to before 5cf2ce8967b0d98c8cfa4dc42ef4fcf080f5c836Affected 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to before 1d7effe5fff9d28e45e18ac3a564067c7ddfe898Affected 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to before f581df412bc45c95176e3c808ee2839c05b2ab0cAffected 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to before 87909291762d08fdb60d19069d7a89b5b308d0efAffected 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to before 412dd8299b02e4410fe77b8396953c1a8dde183aAffected 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to before 271add11994ba1a334859069367e04d2be2ebdd4Affected
LinuxLinux	2.6.29Affected before 2.6.29Not affected 4.9.311 through 4.9.Not affected 4.14.276 through 4.14.Not affected 4.19.238 through 4.19.Not affected 5.4.189 through 5.4.Not affected 5.10.111 through 5.10.Not affected 5.15.34 through 5.15.Not affected 5.16.20 through 5.16.Not affected 5.17.3 through 5.17.Not affected 5.18 and laterNot affected

Product

Versions

LinuxLinux

42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to before 4a131d4ea8b581ac9b01d3a72754db4848be3232Affected
42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to before 499d198494e77b6533251b9b909baf5c101129cbAffected
42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to before 6044ad64f41c87382cfeeca281573d1886d80cbeAffected
42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to before 5cf2ce8967b0d98c8cfa4dc42ef4fcf080f5c836Affected
42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to before 1d7effe5fff9d28e45e18ac3a564067c7ddfe898Affected
42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to before f581df412bc45c95176e3c808ee2839c05b2ab0cAffected
42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to before 87909291762d08fdb60d19069d7a89b5b308d0efAffected
42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to before 412dd8299b02e4410fe77b8396953c1a8dde183aAffected
42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to before 271add11994ba1a334859069367e04d2be2ebdd4Affected

LinuxLinux

2.6.29Affected
before 2.6.29Not affected
4.9.311 through 4.9.*Not affected
4.14.276 through 4.14.*Not affected
4.19.238 through 4.19.*Not affected
5.4.189 through 5.4.*Not affected
5.10.111 through 5.10.*Not affected
5.15.34 through 5.15.*Not affected
5.16.20 through 5.16.*Not affected
5.17.3 through 5.17.*Not affected
5.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.