Riskcovery

CVE-2022-50827

scsi: lpfc: Fix memory leak in lpfc_create_port()

State
Published
Severity
Not scored
Published
Dec 30, 2025
Updated
May 11, 2026
Reserved
Dec 30, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: lpfc: Fix memory leak in lpfc_create_port()

Commit 5e633302ace1 ("scsi: lpfc: vmid: Add support for VMID in mailbox command") introduced allocations for the VMID resources in lpfc_create_port() after the call to scsi_host_alloc(). Upon failure on the VMID allocations, the new code would branch to the 'out' label, which returns NULL without unwinding anything, thus skipping the call to scsi_host_put().

Fix the problem by creating a separate label 'out_free_vmid' to unwind the VMID resources and make the 'out_put_shost' label call only scsi_host_put(), as was done before the introduction of allocations for VMID.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 5e633302ace1f61f8ea5a3ce21e19a4d79126cca to before 9749595feb33a1a2b848800192224ffeed5346b4Affected
  • 5e633302ace1f61f8ea5a3ce21e19a4d79126cca to before 5ea1f195f51c2bb5915ccfb2b2885ca81ce9262bAffected
  • 5e633302ace1f61f8ea5a3ce21e19a4d79126cca to before dc8e483f684a24cc06e1d5fa958b54db58855093Affected
LinuxLinux
  • 5.14Affected
  • before 5.14Not affected
  • 5.15.76 through 5.15.*Not affected
  • 6.0.6 through 6.0.*Not affected
  • 6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.