Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2022-50827

scsi: lpfc: Fix memory leak in lpfc_create_port()

Not scoredEPSS 0.24%
Published
Updated
Reserved
Assigned by
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix memory leak in lpfc_create_port() Commit 5e633302ace1 ("scsi: lpfc: vmid: Add support for VMID in mailbox command") introduced allocations for the VMID resources in lpfc_create_port() after the call to scsi_host_alloc(). Upon failure on the VMID allocations, the new code would branch to the 'out' label, which returns NULL without unwinding anything, thus skipping the call to scsi_host_put(). Fix the problem by creating a separate label 'out_free_vmid' to unwind the VMID resources and make the 'out_put_shost' label call only scsi_host_put(), as was done before the introduction of allocations for VMID.

Timeline

  1. ID reserved

    By Linux

  2. Published

  3. · 4 months later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

No CVSS score yet: neither the CNA, CISA nor NVD has scored this CVE. NVD status: Deferred.

EPSS (exploitation in 30 days)
0.24% · top 85% of all CVEs (7 Nov 2026)
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Not scored.

Affected products

  • Linux · Linux

    • affected 5e633302ace1f61f8ea5a3ce21e19a4d79126cca – < 9749595feb33a1a2b848800192224ffeed5346b4
    • affected 5e633302ace1f61f8ea5a3ce21e19a4d79126cca – < 5ea1f195f51c2bb5915ccfb2b2885ca81ce9262b
    • affected 5e633302ace1f61f8ea5a3ce21e19a4d79126cca – < dc8e483f684a24cc06e1d5fa958b54db58855093

  • Linux · Linux

    • affected 5.14
    • unaffected < 5.14
    • unaffected 5.15.76 – ≤ 5.15.*
    • unaffected 6.0.6 – ≤ 6.0.*
    • unaffected 6.1 – ≤ *

References (3)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2022-50827 badge
[![CVE-2022-50827](https://trackcve.app/badge/CVE-2022-50827.svg)](https://trackcve.app/cve/CVE-2022-50827)

Record last updated .