VDB
CISA-2022-48650
CISA-2022-48650
PUBLISHED
CVSS 4.7 MEDIUM
Reported by Linux · Published April 28, 2024
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts() Commit 8f394da36a36 ("scsi: qla2xxx: Drop TARGET_SCF_LOOKUP_LUN_FROM_TAG") made the __qlt_24xx_handle_abts() function return early if tcm_qla2xxx_find_cmd_by_tag() didn't find a command, but it missed to clean up the allocated memory for the management command.
Risk Scores
CVSS 3.1
4.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | 8f394da36a361cbe0e1e8b1d4213e5598c8095ac, 8f394da36a361cbe0e1e8b1d4213e5598c8095ac, 8f394da36a361cbe0e1e8b1d4213e5598c8095ac |
| Linux | Linux | 5.11, 0, 5.15.71 |
| Linux | Linux | 5.19.12, 8f394da36a361cbe0e1e8b1d4213e5598c8095ac, 8f394da36a361cbe0e1e8b1d4213e5598c8095ac |
| linux | linux_kernel | 5.11, 5.11, 5.11 |
Timeline
- Apr 28, 2024 CVE Published
- May 4, 2025 CVE Updated