Home

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix memory leak in lpfc_create_port() Commit 5e633302ace1 ("scsi: lpfc: vmid: Add support for VMID in mailbox command") introduced allocations for the VMID resources in lpfc_create_port() after the call to scsi_host_alloc(). Upon failure on the VMID allocations, the new code would branch to the 'out' label, which returns NULL without unwinding anything, thus skipping the call to scsi_host_put(). Fix the problem by creating a separate label 'out_free_vmid' to unwind the VMID resources and make the 'out_put_shost' label call only scsi_host_put(), as was done before the introduction of allocations for VMID.

PUBLISHED Reserved 2025-12-30 | Published 2025-12-30 | Updated 2025-12-30 | Assigner Linux

Product status

Default status
unaffected

5e633302ace1f61f8ea5a3ce21e19a4d79126cca (git) before 9749595feb33a1a2b848800192224ffeed5346b4
affected

5e633302ace1f61f8ea5a3ce21e19a4d79126cca (git) before 5ea1f195f51c2bb5915ccfb2b2885ca81ce9262b
affected

5e633302ace1f61f8ea5a3ce21e19a4d79126cca (git) before dc8e483f684a24cc06e1d5fa958b54db58855093
affected

Default status
affected

5.14
affected

Any version before 5.14
unaffected

5.15.76 (semver)
unaffected

6.0.6 (semver)
unaffected

6.1 (original_commit_for_fix)
unaffected

References

git.kernel.org/...c/9749595feb33a1a2b848800192224ffeed5346b4

git.kernel.org/...c/5ea1f195f51c2bb5915ccfb2b2885ca81ce9262b

git.kernel.org/...c/dc8e483f684a24cc06e1d5fa958b54db58855093

cve.org (CVE-2022-50827)

nvd.nist.gov (CVE-2022-50827)

Download JSON

Data based on CVE®. Copyright © 1999-2025, The MITRE Corporation. All rights reserved.