AZL-58352
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-58352.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-58352
- Upstream
- Published
- 2025-02-26T07:01:29Z
- Modified
- 2026-04-01T05:19:16.535947Z
- Severity
-
- 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- CVE-2022-49534 affecting package kernel 5.15.200.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
scsi: lpfc: Protect memory leak for NPIV ports sending PLOGI_RJT
There is a potential memory leak in lpfcignoreelscmpl() and lpfcelsrspreject() that was allocated from NPIV PLOGIRJT (lpfcrcvplogi()'s loginmbox).
Check if cmdiocb->contextun.mbox was allocated in lpfcignoreelscmpl(), and then free it back to phba->mboxmempool along with mbox->ctx_buf for service parameters.
For lpfcelsrspreject() failure, free both the ctxbuf for service parameters and the login_mbox.
- References