CVE-2022-50467

scsi: lpfc: Fix null ndlp ptr dereference in abnormal exit path for GFT_ID

En bref

Sévérité
Non disponible
EPSS
EPSS 0.16 % · centile 5 (2026-10-27)
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
Linux
Statut NVD
Analyzed

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix null ndlp ptr dereference in abnormal exit path for GFT_ID An error case exit from lpfc_cmpl_ct_cmd_gft_id() results in a call to lpfc_nlp_put() with a null pointer to a nodelist structure. Changed lpfc_cmpl_ct_cmd_gft_id() to initialize nodelist pointer upon entry.

Scores

VersionScoreVecteurÉvalué par
CVSS 3.1MEDIUM 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HNVD · nvd@nist.gov (Primary)

Faiblesses (CWE)

Références européennes

Avis du CERT-FR

Configurations affectées (CPE NVD)

Produits affectés

ProduitVersions
Linux · Linuxaffected 04c1d9c50ae32d6efd0b71024b3829051821c7a2 < 04e7cd8c85636a329d1a6e5a269a7c8b6f71c41c ; affected 04c1d9c50ae32d6efd0b71024b3829051821c7a2 < 82dc1fe4324e2c897f2ed1c66f4fcff03094ac3a ; affected 04c1d9c50ae32d6efd0b71024b3829051821c7a2 < 59b7e210a522b836a01516c71ee85d1d92c1f075
Linux · Linuxaffected 5.14 ; unaffected 0 < 5.14 ; unaffected 5.19.17 ≤ 5.19.* ; unaffected 6.0.3 ≤ 6.0.* ; unaffected 6.1 ≤ *

Références

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD