CVE-2022-50827
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix memory leak in lpfc_create_port() Commit 5e633302ace1 ("scsi: lpfc: vmid: Add support for VMID in mailbox command") introduced allocations for the VMID resources in lpfc_create_port() after the call to scsi_host_alloc(). Upon failure on the VMID allocations, the new code would branch to the 'out' label, which returns NULL without unwinding anything, thus skipping the call to scsi_host_put(). Fix the problem by creating a separate label 'out_free_vmid' to unwind the VMID resources and make the 'out_put_shost' label call only scsi_host_put(), as was done before the introduction of allocations for VMID.
How to fix
- Linux Linux9749595feb33a1a2b848800192224ffeed5346b4, 5ea1f195f51c2bb5915ccfb2b2885ca81ce9262b, dc8e483f684a24cc06e1d5fa958b54db58855093 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 5e633302ace1f61f8ea5a3ce21e19a4d79126cca ≤ v < 9749595feb33a1a2b848800192224ffeed5346b4, 5e633302ace1f61f8ea5a3ce21e19a4d79126cca ≤ v < 5ea1f195f51c2bb5915ccfb2b2885ca81ce9262b, 5e633302ace1f61f8ea5a3ce21e19a4d79126cca ≤ v < dc8e483f684a24cc06e1d5fa958b54db58855093, 5.14 | 9749595feb33a1a2b848800192224ffeed5346b4, 5ea1f195f51c2bb5915ccfb2b2885ca81ce9262b, dc8e483f684a24cc06e1d5fa958b54db58855093 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.