CVE-2022-50727
Memory Leak in Linux Kernel efct SCSI Driver Initialization
Publication date: 2025-12-24
Last updated on: 2025-12-24
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a memory leak in the Linux kernel's efct SCSI driver. Specifically, in the efct_device_init() function, if efct_scsi_reg_fc_transport() fails, the cleanup function efct_scsi_tgt_driver_exit() is not called. This omission causes allocated memory from efct_scsi_tgt_driver_init() to not be released, resulting in a memory leak.
How can this vulnerability impact me? :
The memory leak caused by this vulnerability can lead to increased memory usage over time, potentially degrading system performance or causing resource exhaustion. This could affect system stability, especially on systems that frequently initialize and deinitialize the efct SCSI driver.