CVE-2022-50288

qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure

published September 15, 2025

CVSS
—
EPSS
0%
Percentile
5.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure

adapter->dcb would get silently freed inside qlcnic_dcb_enable() in

case qlcnic_dcb_attach() would return an error, which always happens

under OOM conditions. This would lead to use-after-free because both

of the existing callers invoke qlcnic_dcb_get_info() on the obtained

pointer, which is potentially freed at that point.

Propagate errors from qlcnic_dcb_enable(), and instead free the dcb

pointer at callsite using qlcnic_dcb_free(). This also removes the now

unused qlcnic_clear_dcb_ops() helper, which was a simple wrapper around

kfree() also causing memory leaks for partially initialized dcb.

Found by Linux Verification Center (linuxtesting.org) with the SVACE

static analysis tool.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00162 · 5.1th percentile
Published
2025-09-15T14:21Z
EPSS history
Timeline
  • 15 SEP 14:21Z
    qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure
    cvelistv5