---
id: CVE-2022-48650
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  scsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts()

  Commit 8f394da36a36 ("scsi: qla2xxx: Drop TARGET_SCF_LOOKUP_LUN_FROM_TAG")
  made the __qlt_24xx_handle_abts()…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  scsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts()

  Commit 8f394da36a36 ("scsi: qla2xxx: Drop TARGET_SCF_LOOKUP_LUN_FROM_TAG")
  made the __qlt_24xx_handle_abts()…
severity: medium
cvss: 4.7
cvssVector: 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H'
cwe:
  - CWE-401
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 5.11, < 5.15.71'
  - 'linux_kernel >= 5.16, < 5.19.12'
  - linux_kernel = 6.0
patched:
  - linux_kernel 5.19.12
published: '2024-04-28'
updated: '2026-09-14'
sourceUpdated: '2026-09-14T12:17:31.540'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2022-48650'
references:
  - url: 'https://git.kernel.org/stable/c/29a22a3d495c147117137719d2c39045c44ccebf'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/601be20fc6a1b762044d2398befffd6bf236cebf'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/6a4236ed47f5b0a57eb6b8fb1c351b15b3d341d7'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/89df49e561b4a8948521fc3f8a013012eaa08f82'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/601be20fc6a1b762044d2398befffd6bf236cebf'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/6a4236ed47f5b0a57eb6b8fb1c351b15b3d341d7'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/89df49e561b4a8948521fc3f8a013012eaa08f82'
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
  - cve.org
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2024-04-30T16:03:23.433652Z'
epss: 0.00229
epssPercentile: 0.13921
ingestedAt: '2026-09-14T13:14:45.470Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts()

Commit 8f394da36a36 ("scsi: qla2xxx: Drop TARGET_SCF_LOOKUP_LUN_FROM_TAG")
made the __qlt_24xx_handle_abts() function return early if
tcm_qla2xxx_find_cmd_by_tag() didn't find a command, but it missed to clean
up the allocated memory for the management command.

## Affected

- `linux_kernel >= 5.11, < 5.15.71`
- `linux_kernel >= 5.16, < 5.19.12`
- `linux_kernel = 6.0`

## Remediation

Upgrade past the affected range:

- `linux_kernel 5.19.12`