In the Linux kernel, the following vulnerability has been resolved:
qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure
adapter->dcb would get silently freed inside qlcnic_dcb_enable() in
case qlcnic_dcb_attach() would return an error, which always happens
under OOM conditions. This would lead to use-after-free because both
of the existing callers invoke qlcnic_dcb_get_info() on the obtained
pointer, which is potentially freed at that point.
Propagate errors from qlcnic_dcb_enable(), and instead free the dcb
pointer at callsite using qlcnic_dcb_free(). This also removes the now
unused qlcnic_clear_dcb_ops() helper, which was a simple wrapper around
kfree() also causing memory leaks for partially initialized dcb.
Found by Linux Verification Center (linuxtesting.org) with the SVACE
static analysis tool.
References
Configurations
Configuration 1 (hide)
|
History
03 Dec 2025, 19:25
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://git.kernel.org/stable/c/13a7c8964afcd8ca43c0b6001ebb0127baa95362 - Patch | |
| References | () https://git.kernel.org/stable/c/36999236f0b12d5de21a6f40e93b570727b9ceb2 - Patch | |
| References | () https://git.kernel.org/stable/c/513787ff9a331b461115e8a145a983d650a84fcb - Patch | |
| References | () https://git.kernel.org/stable/c/8df1dc04ce0e4c03b51a756749c250a9cb17d707 - Patch | |
| References | () https://git.kernel.org/stable/c/8f97eeb02a553cdc78c83a0596448a370e1518c4 - Patch | |
| References | () https://git.kernel.org/stable/c/95df720e64a6409d8152827a776c43f615e3321a - Patch | |
| References | () https://git.kernel.org/stable/c/a2a694e6edbdb3efb34e1613a31fdcf6cf444a55 - Patch | |
| References | () https://git.kernel.org/stable/c/d12a7510293d3370b234b0b7c5eda33e58786768 - Patch | |
| First Time |
Linux
Linux linux Kernel |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| CWE | CWE-416 | |
| CPE | cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:* |
Information
Published : 2025-09-15 15:15
Updated : 2025-12-03 19:25
NVD link : CVE-2022-50288
Mitre link : CVE-2022-50288
CVE.ORG link : CVE-2022-50288
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-416
Use After Free