CVE-2022-49521

scsi: lpfc: Fix resource leak in lpfc_sli4_send_seq_to_ulp()

published February 26, 2025

CVSS
—
EPSS
0%
Percentile
18.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

scsi: lpfc: Fix resource leak in lpfc_sli4_send_seq_to_ulp()

If no handler is found in lpfc_complete_unsol_iocb() to match the rctl of a

received frame, the frame is dropped and resources are leaked.

Fix by returning resources when discarding an unhandled frame type. Update

lpfc_fc_frame_check() handling of NOP basic link service.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00268 · 18.0th percentile
Published
2025-02-26T02:13Z
EPSS history
Timeline
  • 26 FEB 02:13Z
    scsi: lpfc: Fix resource leak in lpfc_sli4_send_seq_to_ulp()
    cvelistv5