{"id":"CVE-2022-48650","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts()\n\nCommit 8f394da36a36 (\"scsi: qla2xxx: Drop TARGET_SCF_LOOKUP_LUN_FROM_TAG\")\nmade the __qlt_24xx_handle_abts()…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts()\n\nCommit 8f394da36a36 (\"scsi: qla2xxx: Drop TARGET_SCF_LOOKUP_LUN_FROM_TAG\")\nmade the __qlt_24xx_handle_abts()…","severity":"medium","cvss":4.7,"cvssVector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-401"],"vendor":"linux","product":"linux_kernel","affected":["linux_kernel >= 5.11, < 5.15.71","linux_kernel >= 5.16, < 5.19.12","linux_kernel = 6.0"],"patched":["linux_kernel 5.19.12"],"published":"2024-04-28","updated":"2026-09-14","sourceUpdated":"2026-09-14T12:17:31.540","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2022-48650","references":[{"url":"https://git.kernel.org/stable/c/29a22a3d495c147117137719d2c39045c44ccebf","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/601be20fc6a1b762044d2398befffd6bf236cebf","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/6a4236ed47f5b0a57eb6b8fb1c351b15b3d341d7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/89df49e561b4a8948521fc3f8a013012eaa08f82","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/601be20fc6a1b762044d2398befffd6bf236cebf","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/6a4236ed47f5b0a57eb6b8fb1c351b15b3d341d7","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/89df49e561b4a8948521fc3f8a013012eaa08f82","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2024-04-30T16:03:23.433652Z"},"epss":0.00229,"epssPercentile":0.13914,"ingestedAt":"2026-09-14T13:14:45.470Z","slug":"CVE-2022-48650","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts()\n\nCommit 8f394da36a36 (\"scsi: qla2xxx: Drop TARGET_SCF_LOOKUP_LUN_FROM_TAG\")\nmade the __qlt_24xx_handle_abts() function return early if\ntcm_qla2xxx_find_cmd_by_tag() didn't find a command, but it missed to clean\nup the allocated memory for the management command.\n\n## Affected\n\n- `linux_kernel >= 5.11, < 5.15.71`\n- `linux_kernel >= 5.16, < 5.19.12`\n- `linux_kernel = 6.0`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 5.19.12`","depth":"sunlit","depthScore":26,"depthScoreParts":{"impact":25.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}