CVE-2022-50031

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi: Fix HW conn removal use after free If qla4xxx doesn't remove the connection before the session, the iSCSI class tries to remove the connection for it. We were doing a iscsi_put_conn() in the iter function which is not needed and will result in a use after free because iscsi_remove_conn() will free the connection.

Reserved 2025-06-18 | Published 2025-06-18 | Updated 2025-06-18 | Assigner Linux

Product status

Default status
unaffected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 0483ffc02ebb953124c592485a5c48ac4ffae5fe
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before c577ab7ba5f3bf9062db8a58b6e89d4fe370447e
affected

Default status
affected

5.19.4
unaffected

6.0
unaffected

References

git.kernel.org/...c/0483ffc02ebb953124c592485a5c48ac4ffae5fe

git.kernel.org/...c/c577ab7ba5f3bf9062db8a58b6e89d4fe370447e

cve.org (CVE-2022-50031)

nvd.nist.gov (CVE-2022-50031)

Download JSON