CVE-2022-49521

scsi: lpfc: Fix resource leak in lpfc_sli4_send_seq_to_ulp()

MEDIUM

5.5

CVSS Score

Published: February 26, 2025 at 02:13 AM UTC

Updated: June 17, 2026 at 05:18 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.3%

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix resource leak in lpfc_sli4_send_seq_to_ulp() If no handler is found in lpfc_complete_unsol_iocb() to match the rctl of a received frame, the frame is dropped and resources are leaked. Fix by returning resources when discarding an unhandled frame type. Update lpfc_fc_frame_check() handling of NOP basic link service.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

v < 5.10.1212.6.31 ≤ v < 5.10.1212.6.31 ≤ v < 5.15.462.6.31 ≤ v < 5.17.142.6.31 ≤ v < 5.18.32.6.31 ≤ v < 5.195.11 ≤ v < 5.15.465.16 ≤ v < 5.17.145.18 ≤ v < 5.18.32.6.314f774513f7b3fe96648b8936f60f835e6ceaa88e

Vendor states this is fixed in 08709769ff2fb6c5ffedcda3742700d8ea1618a8 (fixed)

Vendor states this is fixed in 40cf4ea4d2d497f7732c87d350ba5c3f5e8a43a1 (fixed)

Vendor states this is fixed in 646db1a560f44236b7278b822ca99a1d3b6ea72c (fixed)

Vendor states this is fixed in 7860d8f8082605b57596aa82d3d438c1fdad9a9e (fixed)

Vendor states this is fixed in fa1b509d41c5433672f72c0615cf4aefa0611c99 (fixed)

Vendor states this is fixed in 2.6.31 (unaffected)

Vendor states this is fixed in 5.10.121 (unaffected)

Vendor states this is fixed in 5.15.46 (unaffected)

Vendor states this is fixed in 5.17.14 (unaffected)

Vendor states this is fixed in 5.18.3 (unaffected)

Vendor states this is fixed in 5.19 (unaffected)