Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2022-49114

scsi: libfc: Fix use after free in fc_exch_abts_resp()

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix use after free in fc_exch_abts_resp() fc_exch_release(ep) will decrease the ep's reference count. When the reference count reaches zero, it is freed. But ep is still used in the following code, which will lead to a use after free. Return after the fc_exch_release() call to avoid use after free.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to < 4a131d4ea8b581ac9b01d3a72754db4848be3232affected
  • 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to < 499d198494e77b6533251b9b909baf5c101129cbaffected
  • 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to < 6044ad64f41c87382cfeeca281573d1886d80cbeaffected
  • 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to < 5cf2ce8967b0d98c8cfa4dc42ef4fcf080f5c836affected
  • 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to < 1d7effe5fff9d28e45e18ac3a564067c7ddfe898affected
  • 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to < f581df412bc45c95176e3c808ee2839c05b2ab0caffected
  • 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to < 87909291762d08fdb60d19069d7a89b5b308d0efaffected
  • 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to < 412dd8299b02e4410fe77b8396953c1a8dde183aaffected
  • 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to < 271add11994ba1a334859069367e04d2be2ebdd4affected

Linux Linux

Default version status: affected

  • 2.6.29affected
  • 0 to < 2.6.29unaffected
  • 4.9.311 to ≤ 4.9.*unaffected
  • 4.14.276 to ≤ 4.14.*unaffected
  • 4.19.238 to ≤ 4.19.*unaffected
  • 5.4.189 to ≤ 5.4.*unaffected
  • 5.10.111 to ≤ 5.10.*unaffected
  • 5.15.34 to ≤ 5.15.*unaffected
  • 5.16.20 to ≤ 5.16.*unaffected
  • 5.17.3 to ≤ 5.17.*unaffected
  • 5.18 to ≤ *unaffected

References