In the Linux kernel, the following vulnerability has been resolved:
scsi: lpfc: Fix resource leak in lpfcsli4sendseqto_ulp()
If no handler is found in lpfccompleteunsol_iocb() to match the rctl of a received frame, the frame is dropped and resources are leaked.
Fix by returning resources when discarding an unhandled frame type. Update lpfcfcframe_check() handling of NOP basic link service.
[
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"function_hash": "310785255524905653495386398211246290058",
"length": 1654.0
},
"id": "CVE-2022-49521-024985fc",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@646db1a560f44236b7278b822ca99a1d3b6ea72c",
"signature_type": "Function",
"target": {
"function": "lpfc_fc_frame_check",
"file": "drivers/scsi/lpfc/lpfc_sli.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"function_hash": "219734247074268906984140913366557804849",
"length": 839.0
},
"id": "CVE-2022-49521-0a464171",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@40cf4ea4d2d497f7732c87d350ba5c3f5e8a43a1",
"signature_type": "Function",
"target": {
"function": "lpfc_sli4_send_seq_to_ulp",
"file": "drivers/scsi/lpfc/lpfc_sli.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"202338373656636424864254059214851972607",
"153943041456446372362535681060160913478",
"14090974093045304568874421039121974375",
"43243168029023024887346098842136879312",
"269052185828477784398136608700576911184",
"230526815284902733223955195615768025820",
"92616446849169317449736801921442920885",
"27325205634280346978523920163828615838",
"155863315682488374325327761029658432736",
"198765877923351538698946261877007421094",
"68759260340932495577899959176041241573",
"314528049789690645610800186489112439130",
"189720041234539036749779045517891418107",
"248282466260387252262011448436133399981",
"210320785167790758117437313098528476021",
"263350783291207704805655346480916227334",
"284162265445587287040395710760120827496"
],
"threshold": 0.9
},
"id": "CVE-2022-49521-0ac6d0e8",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@646db1a560f44236b7278b822ca99a1d3b6ea72c",
"signature_type": "Line",
"target": {
"file": "drivers/scsi/lpfc/lpfc_sli.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"function_hash": "219734247074268906984140913366557804849",
"length": 839.0
},
"id": "CVE-2022-49521-32b12627",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@646db1a560f44236b7278b822ca99a1d3b6ea72c",
"signature_type": "Function",
"target": {
"function": "lpfc_sli4_send_seq_to_ulp",
"file": "drivers/scsi/lpfc/lpfc_sli.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"function_hash": "310785255524905653495386398211246290058",
"length": 1654.0
},
"id": "CVE-2022-49521-45071be3",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7860d8f8082605b57596aa82d3d438c1fdad9a9e",
"signature_type": "Function",
"target": {
"function": "lpfc_fc_frame_check",
"file": "drivers/scsi/lpfc/lpfc_sli.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"function_hash": "219734247074268906984140913366557804849",
"length": 839.0
},
"id": "CVE-2022-49521-47dbb977",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7860d8f8082605b57596aa82d3d438c1fdad9a9e",
"signature_type": "Function",
"target": {
"function": "lpfc_sli4_send_seq_to_ulp",
"file": "drivers/scsi/lpfc/lpfc_sli.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"function_hash": "219734247074268906984140913366557804849",
"length": 839.0
},
"id": "CVE-2022-49521-4ba27e0d",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@08709769ff2fb6c5ffedcda3742700d8ea1618a8",
"signature_type": "Function",
"target": {
"function": "lpfc_sli4_send_seq_to_ulp",
"file": "drivers/scsi/lpfc/lpfc_sli.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"function_hash": "310785255524905653495386398211246290058",
"length": 1654.0
},
"id": "CVE-2022-49521-4f42975d",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@40cf4ea4d2d497f7732c87d350ba5c3f5e8a43a1",
"signature_type": "Function",
"target": {
"function": "lpfc_fc_frame_check",
"file": "drivers/scsi/lpfc/lpfc_sli.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"function_hash": "310785255524905653495386398211246290058",
"length": 1654.0
},
"id": "CVE-2022-49521-64492be3",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@08709769ff2fb6c5ffedcda3742700d8ea1618a8",
"signature_type": "Function",
"target": {
"function": "lpfc_fc_frame_check",
"file": "drivers/scsi/lpfc/lpfc_sli.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"202338373656636424864254059214851972607",
"153943041456446372362535681060160913478",
"14090974093045304568874421039121974375",
"43243168029023024887346098842136879312",
"269052185828477784398136608700576911184",
"230526815284902733223955195615768025820",
"92616446849169317449736801921442920885",
"27325205634280346978523920163828615838",
"155863315682488374325327761029658432736",
"198765877923351538698946261877007421094",
"68759260340932495577899959176041241573",
"314528049789690645610800186489112439130",
"189720041234539036749779045517891418107",
"248282466260387252262011448436133399981",
"210320785167790758117437313098528476021",
"263350783291207704805655346480916227334",
"284162265445587287040395710760120827496"
],
"threshold": 0.9
},
"id": "CVE-2022-49521-64765b2c",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@08709769ff2fb6c5ffedcda3742700d8ea1618a8",
"signature_type": "Line",
"target": {
"file": "drivers/scsi/lpfc/lpfc_sli.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"function_hash": "219734247074268906984140913366557804849",
"length": 839.0
},
"id": "CVE-2022-49521-6ef51613",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fa1b509d41c5433672f72c0615cf4aefa0611c99",
"signature_type": "Function",
"target": {
"function": "lpfc_sli4_send_seq_to_ulp",
"file": "drivers/scsi/lpfc/lpfc_sli.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"202338373656636424864254059214851972607",
"153943041456446372362535681060160913478",
"14090974093045304568874421039121974375",
"43243168029023024887346098842136879312",
"269052185828477784398136608700576911184",
"230526815284902733223955195615768025820",
"92616446849169317449736801921442920885",
"27325205634280346978523920163828615838",
"155863315682488374325327761029658432736",
"198765877923351538698946261877007421094",
"68759260340932495577899959176041241573",
"314528049789690645610800186489112439130",
"189720041234539036749779045517891418107",
"248282466260387252262011448436133399981",
"210320785167790758117437313098528476021",
"263350783291207704805655346480916227334",
"284162265445587287040395710760120827496"
],
"threshold": 0.9
},
"id": "CVE-2022-49521-8bf288aa",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@40cf4ea4d2d497f7732c87d350ba5c3f5e8a43a1",
"signature_type": "Line",
"target": {
"file": "drivers/scsi/lpfc/lpfc_sli.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"202338373656636424864254059214851972607",
"153943041456446372362535681060160913478",
"14090974093045304568874421039121974375",
"43243168029023024887346098842136879312",
"269052185828477784398136608700576911184",
"230526815284902733223955195615768025820",
"92616446849169317449736801921442920885",
"27325205634280346978523920163828615838",
"155863315682488374325327761029658432736",
"198765877923351538698946261877007421094",
"68759260340932495577899959176041241573",
"314528049789690645610800186489112439130",
"189720041234539036749779045517891418107",
"248282466260387252262011448436133399981",
"210320785167790758117437313098528476021",
"263350783291207704805655346480916227334",
"284162265445587287040395710760120827496"
],
"threshold": 0.9
},
"id": "CVE-2022-49521-cb7ae80d",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7860d8f8082605b57596aa82d3d438c1fdad9a9e",
"signature_type": "Line",
"target": {
"file": "drivers/scsi/lpfc/lpfc_sli.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"function_hash": "310785255524905653495386398211246290058",
"length": 1654.0
},
"id": "CVE-2022-49521-d387e1fd",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fa1b509d41c5433672f72c0615cf4aefa0611c99",
"signature_type": "Function",
"target": {
"function": "lpfc_fc_frame_check",
"file": "drivers/scsi/lpfc/lpfc_sli.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"202338373656636424864254059214851972607",
"153943041456446372362535681060160913478",
"14090974093045304568874421039121974375",
"43243168029023024887346098842136879312",
"269052185828477784398136608700576911184",
"230526815284902733223955195615768025820",
"92616446849169317449736801921442920885",
"27325205634280346978523920163828615838",
"155863315682488374325327761029658432736",
"198765877923351538698946261877007421094",
"68759260340932495577899959176041241573",
"314528049789690645610800186489112439130",
"189720041234539036749779045517891418107",
"248282466260387252262011448436133399981",
"210320785167790758117437313098528476021",
"263350783291207704805655346480916227334",
"284162265445587287040395710760120827496"
],
"threshold": 0.9
},
"id": "CVE-2022-49521-db1d7d3b",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fa1b509d41c5433672f72c0615cf4aefa0611c99",
"signature_type": "Line",
"target": {
"file": "drivers/scsi/lpfc/lpfc_sli.c"
}
}
]