Riskcovery

CVE-2022-49521

scsi: lpfc: Fix resource leak in lpfc_sli4_send_seq_to_ulp()

State
Published
Severity
Not scored
Published
Feb 26, 2025
Updated
May 11, 2026
Reserved
Feb 26, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: lpfc: Fix resource leak in lpfc_sli4_send_seq_to_ulp()

If no handler is found in lpfc_complete_unsol_iocb() to match the rctl of a received frame, the frame is dropped and resources are leaked.

Fix by returning resources when discarding an unhandled frame type. Update lpfc_fc_frame_check() handling of NOP basic link service.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 4f774513f7b3fe96648b8936f60f835e6ceaa88e to before fa1b509d41c5433672f72c0615cf4aefa0611c99Affected
  • 4f774513f7b3fe96648b8936f60f835e6ceaa88e to before 40cf4ea4d2d497f7732c87d350ba5c3f5e8a43a1Affected
  • 4f774513f7b3fe96648b8936f60f835e6ceaa88e to before 08709769ff2fb6c5ffedcda3742700d8ea1618a8Affected
  • 4f774513f7b3fe96648b8936f60f835e6ceaa88e to before 7860d8f8082605b57596aa82d3d438c1fdad9a9eAffected
  • 4f774513f7b3fe96648b8936f60f835e6ceaa88e to before 646db1a560f44236b7278b822ca99a1d3b6ea72cAffected
LinuxLinux
  • 2.6.31Affected
  • before 2.6.31Not affected
  • 5.10.121 through 5.10.*Not affected
  • 5.15.46 through 5.15.*Not affected
  • 5.17.14 through 5.17.*Not affected
  • 5.18.3 through 5.18.*Not affected
  • 5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.