CVE-2022-50414

scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails

State: Published
Severity: 5.5 Medium
Published: Sep 18, 2025
Updated: May 11, 2026
Reserved: Sep 17, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails

fcoe_init() calls fcoe_transport_attach(&fcoe_sw_transport), but when fcoe_if_init() fails, &fcoe_sw_transport is not detached and leaves freed &fcoe_sw_transport on fcoe_transports list. This causes panic when reinserting module.

BUG: unable to handle page fault for address: fffffbfff82e2213 RIP: 0010:fcoe_transport_attach+0xe1/0x230 [libfcoe] Call Trace: <TASK> do_one_initcall+0xd0/0x4e0 load_module+0x5eee/0x7210 ...

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	78a582463c1e3a262aeaf2a291e06a93a7b34212 to before d581303d6f8d4139513105d73dd65f26c6707160Affected 78a582463c1e3a262aeaf2a291e06a93a7b34212 to before b5cc59470df64f26ad397dbb71cbf130cf489edfAffected 78a582463c1e3a262aeaf2a291e06a93a7b34212 to before cf74d1197c0e3d2f353faa333e9e2847c73713f1Affected 78a582463c1e3a262aeaf2a291e06a93a7b34212 to before be5f1a82ad6056db22c86005dc4cac22a20deeefAffected 78a582463c1e3a262aeaf2a291e06a93a7b34212 to before 22e8c7a56bb1cd2ed0beaaccb34282ac9cbbe27eAffected 78a582463c1e3a262aeaf2a291e06a93a7b34212 to before 09a60f908d8b6497f618113b7c3c31267dc90911Affected 78a582463c1e3a262aeaf2a291e06a93a7b34212 to before 1dc499c615aa87dc46a3f2d1f91d2d358e55f3e3Affected 78a582463c1e3a262aeaf2a291e06a93a7b34212 to before aef82d16be5a353d913163f26fc4385e296be2b8Affected 78a582463c1e3a262aeaf2a291e06a93a7b34212 to before 4155658cee394b22b24c6d64e49247bf26d95b92Affected
LinuxLinux	2.6.39Affected before 2.6.39Not affected 4.9.337 through 4.9.Not affected 4.14.303 through 4.14.Not affected 4.19.270 through 4.19.Not affected 5.4.229 through 5.4.Not affected 5.10.163 through 5.10.Not affected 5.15.86 through 5.15.Not affected 6.0.16 through 6.0.Not affected 6.1.2 through 6.1.Not affected 6.2 and laterNot affected

Product

Versions

LinuxLinux

78a582463c1e3a262aeaf2a291e06a93a7b34212 to before d581303d6f8d4139513105d73dd65f26c6707160Affected
78a582463c1e3a262aeaf2a291e06a93a7b34212 to before b5cc59470df64f26ad397dbb71cbf130cf489edfAffected
78a582463c1e3a262aeaf2a291e06a93a7b34212 to before cf74d1197c0e3d2f353faa333e9e2847c73713f1Affected
78a582463c1e3a262aeaf2a291e06a93a7b34212 to before be5f1a82ad6056db22c86005dc4cac22a20deeefAffected
78a582463c1e3a262aeaf2a291e06a93a7b34212 to before 22e8c7a56bb1cd2ed0beaaccb34282ac9cbbe27eAffected
78a582463c1e3a262aeaf2a291e06a93a7b34212 to before 09a60f908d8b6497f618113b7c3c31267dc90911Affected
78a582463c1e3a262aeaf2a291e06a93a7b34212 to before 1dc499c615aa87dc46a3f2d1f91d2d358e55f3e3Affected
78a582463c1e3a262aeaf2a291e06a93a7b34212 to before aef82d16be5a353d913163f26fc4385e296be2b8Affected
78a582463c1e3a262aeaf2a291e06a93a7b34212 to before 4155658cee394b22b24c6d64e49247bf26d95b92Affected

LinuxLinux

2.6.39Affected
before 2.6.39Not affected
4.9.337 through 4.9.*Not affected
4.14.303 through 4.14.*Not affected
4.19.270 through 4.19.*Not affected
5.4.229 through 5.4.*Not affected
5.10.163 through 5.10.*Not affected
5.15.86 through 5.15.*Not affected
6.0.16 through 6.0.*Not affected
6.1.2 through 6.1.*Not affected
6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.