CVE-2022-49730
26.02.2025, 07:01
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted A use-after-free crash can occur after an ELS LOGO is aborted. Specifically, a nodelist structure is freed and then ndlp->vport->cfg_log_verbose is dereferenced in lpfc_nlp_get() when the discovery state machine is mistakenly called a second time with NLP_EVT_DEVICE_RM argument. Rework lpfc_cmpl_els_logo() to prevent the duplicate calls to release a nodelist structure.Enginsight
Vendor | Product | Version |
---|---|---|
linux | linux_kernel | 𝑥 < 5.15.49 |
linux | linux_kernel | 5.16 ≤ 𝑥 < 5.18.6 |
linux | linux_kernel | 5.19:rc1 |
𝑥
= Vulnerable software versions

Debian Releases
Common Weakness Enumeration