CVE-2022-49521

MEDIUM EPSS 15.8%
Published Feb 26, 20251y ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Feb 26, 2025 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix resource leak in lpfc_sli4_send_seq_to_ulp() If no handler is found in lpfc_complete_unsol_iocb() to match the rctl of a received frame, the frame is dropped and resources are leaked. Fix by returning resources when discarding an unhandled frame type. Update lpfc_fc_frame_check() handling of NOP basic link service.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
15.8% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-401

Affected Products 4

VendorProductVersionRange
linuxlinux_kernel* <5.10.121
linuxlinux_kernel*≥5.11  –  <5.15.46
linuxlinux_kernel*≥5.16  –  <5.17.14
linuxlinux_kernel*≥5.18  –  <5.18.3

References 5

  • git.kernel.org https://git.kernel.org/stable/c/08709769ff2fb6c5ffedcda3742700d8ea1618a8
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/40cf4ea4d2d497f7732c87d350ba5c3f5e8a43a1
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/646db1a560f44236b7278b822ca99a1d3b6ea72c
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/7860d8f8082605b57596aa82d3d438c1fdad9a9e
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/fa1b509d41c5433672f72c0615cf4aefa0611c99
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/08709769ff2fb6c5ffedcda3742700d8ea1618a8
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/40cf4ea4d2d497f7732c87d350ba5c3f5e8a43a1
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/646db1a560f44236b7278b822ca99a1d3b6ea72c
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/7860d8f8082605b57596aa82d3d438c1fdad9a9e
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/fa1b509d41c5433672f72c0615cf4aefa0611c99
    Patch