5.5

CVE-2022-50242

drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init()

In the Linux kernel, the following vulnerability has been resolved:

drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init()

If vp alloc failed in qlcnic_sriov_init(), all previously allocated vp
needs to be freed.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
LinuxLinux Kernel Version >= 3.10 < 4.9.337
LinuxLinux Kernel Version >= 4.10 < 4.14.303
LinuxLinux Kernel Version >= 4.15 < 4.19.270
LinuxLinux Kernel Version >= 4.20 < 5.4.229
LinuxLinux Kernel Version >= 5.5 < 5.10.163
LinuxLinux Kernel Version >= 5.11 < 5.15.86
LinuxLinux Kernel Version >= 5.16 < 6.0.16
LinuxLinux Kernel Version >= 6.1 < 6.1.2
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.15% 0.044
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

https://git.kernel.org/stable/c/15770edc01edfce773269e8a443ca8e420f6f859
Patch
https://git.kernel.org/stable/c/0aefadf23ee5e33b747df195ace42d3be2025e4e
Patch
https://git.kernel.org/stable/c/132c502919bb08e16e3054cb28bb7b149ec20cf5
Patch
https://git.kernel.org/stable/c/a44490abaf00f5b0cc5c448a17eae331c6195d0a
Patch
https://git.kernel.org/stable/c/14b349a15c297cf3e01b5deb4116f7cf297b6184
Patch
https://git.kernel.org/stable/c/8399b9893548c03fdb18be277bf99d985dbde925
Patch
https://git.kernel.org/stable/c/aa2d179544b6815b4a23c0c44543ba0971d49fce
Patch
https://git.kernel.org/stable/c/dcae92a249551d1a447804b4be1c9fab0e8c95e8
Patch
https://git.kernel.org/stable/c/01de1123322e4fe1bbd0fcdf0982511b55519c03
Patch