CVE-2022-49534

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A potential memory leak was identified in the Linux kernel, specifically in the lpfc driver. The issue occurs when handling NPIV PLOGI RJT responses, where memory allocated for service parameters and login mailboxes is not properly freed. This can happen in two functions: lpfc ignore els cmpl() and lpfc els rsp reject(). The memory leak is related to the lpfc rcv plogi() function's login mailbox.

Recommendations To resolve the issue, ensure that the cmdiocb->context un.mbox is checked for allocation in lpfc ignore els cmpl() and freed back to phba->mbox mem pool along with mbox->ctx buf for service parameters. For lpfc els rsp reject() failures, free both the ctx buf for service parameters and the login mailbox. At the moment, there is no information about a newer version that contains a fix for this vulnerability.