In the Linux kernel, the following vulnerability has been resolved:
scsi: lpfc: Protect memory leak for NPIV ports sending PLOGI_RJT
There is a potential memory leak in lpfcignoreelscmpl() and lpfcelsrspreject() that was allocated from NPIV PLOGIRJT (lpfcrcvplogi()'s loginmbox).
Check if cmdiocb->contextun.mbox was allocated in lpfcignoreelscmpl(), and then free it back to phba->mboxmempool along with mbox->ctx_buf for service parameters.
For lpfcelsrspreject() failure, free both the ctxbuf for service parameters and the login_mbox.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c00df0f34a6d5e14da379f96ea67e501ce67b002",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-49534-17f675c2",
"target": {
"function": "lpfc_ignore_els_cmpl",
"file": "drivers/scsi/lpfc/lpfc_sli.c"
},
"signature_type": "Function",
"digest": {
"length": 703.0,
"function_hash": "276261477559331194737071372658910977618"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c00df0f34a6d5e14da379f96ea67e501ce67b002",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-49534-3bc9a7ca",
"target": {
"file": "drivers/scsi/lpfc/lpfc_nportdisc.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"131048530859906182339002359343345006964",
"171781443737828735884370434930024909100",
"269769224808345916864196980534065294841",
"282793961439860597670716072815496073390",
"81179075779709512511324524700320929080",
"245467520485529629185146778546628666289"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c00df0f34a6d5e14da379f96ea67e501ce67b002",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-49534-4058102d",
"target": {
"function": "lpfc_rcv_plogi",
"file": "drivers/scsi/lpfc/lpfc_nportdisc.c"
},
"signature_type": "Function",
"digest": {
"length": 7240.0,
"function_hash": "169519709529317198014683984795957478415"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@672d1cb40551ea9c95efad43ab6d45e4ab4e015f",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-49534-68c35405",
"target": {
"file": "drivers/scsi/lpfc/lpfc_sli.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"132086720960212564752607647337825693423",
"59986113278101053835526824079663884004",
"80443925233455462283153411151038719869",
"112072615920640188919760453053618755880",
"338836966751170941658751372431429291483",
"112581796758578634412141036829378174842",
"22134438020639596141946767668896533108",
"296825657417608462821713435078023697578"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@672d1cb40551ea9c95efad43ab6d45e4ab4e015f",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-49534-95ef5fd1",
"target": {
"function": "lpfc_rcv_plogi",
"file": "drivers/scsi/lpfc/lpfc_nportdisc.c"
},
"signature_type": "Function",
"digest": {
"length": 7240.0,
"function_hash": "169519709529317198014683984795957478415"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@672d1cb40551ea9c95efad43ab6d45e4ab4e015f",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-49534-a0957d19",
"target": {
"function": "lpfc_ignore_els_cmpl",
"file": "drivers/scsi/lpfc/lpfc_sli.c"
},
"signature_type": "Function",
"digest": {
"length": 703.0,
"function_hash": "276261477559331194737071372658910977618"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c00df0f34a6d5e14da379f96ea67e501ce67b002",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-49534-db2792cd",
"target": {
"file": "drivers/scsi/lpfc/lpfc_sli.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"132086720960212564752607647337825693423",
"59986113278101053835526824079663884004",
"80443925233455462283153411151038719869",
"112072615920640188919760453053618755880",
"338836966751170941658751372431429291483",
"112581796758578634412141036829378174842",
"22134438020639596141946767668896533108",
"296825657417608462821713435078023697578"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@672d1cb40551ea9c95efad43ab6d45e4ab4e015f",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-49534-e239c99b",
"target": {
"file": "drivers/scsi/lpfc/lpfc_nportdisc.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"131048530859906182339002359343345006964",
"171781443737828735884370434930024909100",
"269769224808345916864196980534065294841",
"282793961439860597670716072815496073390",
"81179075779709512511324524700320929080",
"245467520485529629185146778546628666289"
]
}
}
]