CVE-2022-50727

scsi: efct: Fix possible memleak in efct_device_init()

published December 24, 2025

CVSS
—
EPSS
0%
Percentile
14.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

scsi: efct: Fix possible memleak in efct_device_init()

In efct_device_init(), when efct_scsi_reg_fc_transport() fails,

efct_scsi_tgt_driver_exit() is not called to release memory for

efct_scsi_tgt_driver_init() and causes memleak:

unreferenced object 0xffff8881020ce000 (size 2048):

comm "modprobe", pid 465, jiffies 4294928222 (age 55.872s)

backtrace:

[<0000000021a1ef1b>] kmalloc_trace+0x27/0x110

[<000000004c3ed51c>] target_register_template+0x4fd/0x7b0 [target_core_mod]

[<00000000f3393296>] efct_scsi_tgt_driver_init+0x18/0x50 [efct]

[<00000000115de533>] 0xffffffffc0d90011

[<00000000d608f646>] do_one_initcall+0xd0/0x4e0

[<0000000067828cf1>] do_init_module+0x1cc/0x6a0

...

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00244 · 14.7th percentile
Published
2025-12-24T12:22Z
EPSS history
Timeline
  • 24 DEC 12:22Z
    scsi: efct: Fix possible memleak in efct_device_init()
    cvelistv5