Executive Summary

Informations
Name CVE-2022-49730 First vendor Publication 2025-02-26
Vendor Cve Last vendor Modification 2025-03-24

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score N/A Attack Range N/A
Cvss Impact Score N/A Attack Complexity N/A
Cvss Expoit Score N/A Authentication N/A
Calculate full CVSS 2.0 Vectors scores

Detail

In the Linux kernel, the following vulnerability has been resolved:

scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted

A use-after-free crash can occur after an ELS LOGO is aborted.

Specifically, a nodelist structure is freed and then ndlp->vport->cfg_log_verbose is dereferenced in lpfc_nlp_get() when the discovery state machine is mistakenly called a second time with NLP_EVT_DEVICE_RM argument.

Rework lpfc_cmpl_els_logo() to prevent the duplicate calls to release a nodelist structure.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-49730

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 8
Os 3540

Sources (Detail)

https://git.kernel.org/stable/c/5e83869e29448958f8ae2c6911f350318f75e4fc
https://git.kernel.org/stable/c/b1b3440f437b75fb2a9b0cfe58df461e40eca474
https://git.kernel.org/stable/c/eea34ce23dc3a595695856dc73bb132a9c5a2902
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
Date Informations
2025-06-26 02:10:16
  • Multiple Updates
2025-06-25 12:23:05
  • Multiple Updates
2025-06-24 02:14:52
  • Multiple Updates
2025-05-27 02:11:35
  • Multiple Updates
2025-03-28 17:20:56
  • Multiple Updates
2025-03-28 13:35:28
  • Multiple Updates
2025-03-28 02:57:33
  • Multiple Updates
2025-03-25 00:20:58
  • Multiple Updates
2025-02-28 00:20:33
  • Multiple Updates
2025-02-26 17:20:29
  • First insertion