In the Linux kernel, the following vulnerability has been resolved:
scsi: fcoe: Fix transport not deattached when fcoeifinit() fails
fcoeinit() calls fcoetransportattach(&fcoeswtransport), but when fcoeifinit() fails, &fcoeswtransport is not detached and leaves freed &fcoeswtransport on fcoetransports list. This causes panic when reinserting module.
BUG: unable to handle page fault for address: fffffbfff82e2213 RIP: 0010:fcoetransportattach+0xe1/0x230 [libfcoe] Call Trace: <TASK> dooneinitcall+0xd0/0x4e0 load_module+0x5eee/0x7210 ...
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50414.json"
}"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50414.json"
[
{
"signature_version": "v1",
"target": {
"file": "drivers/scsi/fcoe/fcoe.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d581303d6f8d4139513105d73dd65f26c6707160",
"deprecated": false,
"digest": {
"line_hashes": [
"47669730917473240382239095271185264335",
"41306131276016277793298739205497919064",
"158122650596075855906388400110444499949",
"322420209798249047999560992538204315470"
],
"threshold": 0.9
},
"id": "CVE-2022-50414-9ab63c02",
"signature_type": "Line"
},
{
"signature_version": "v1",
"target": {
"file": "drivers/scsi/fcoe/fcoe.c",
"function": "fcoe_init"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d581303d6f8d4139513105d73dd65f26c6707160",
"deprecated": false,
"digest": {
"function_hash": "235423482991032978341483082422308961743",
"length": 734.0
},
"id": "CVE-2022-50414-de62becf",
"signature_type": "Function"
}
]