cveboard RSS feed

CVE-2022-50288

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2022
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure

In the Linux kernel, the following vulnerability has been resolved: qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure adapter->dcb would get silently freed inside qlcnic_dcb_enable() in case qlcnic_dcb_attach() would return an error, which always happens under OOM conditions. This would lead to use-after-free because both of the existing callers invoke qlcnic_dcb_get_info() on the obtained pointer, which is potentially freed at that point. Propagate errors from qlcnic_dcb_enable(), and instead free the dcb pointer at callsite using qlcnic_dcb_free(). This also removes the now unused qlcnic_clear_dcb_ops() helper, which was a simple wrapper around kfree() also causing memory leaks for partially initialized dcb. Found by Linux Verification Center (linuxtesting.org) with the SVACE static analysis tool.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Linux

Vendor
Linux
Product
Linux
Platforms
Unknown
Default status
unaffected
Linux · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
3c44bba1d270cb1620b4fe76786d0968118cb86baffectedgit36999236f0b12d5de21a6f40e93b570727b9ceb2UnavailableNone listed
3c44bba1d270cb1620b4fe76786d0968118cb86baffectedgitd12a7510293d3370b234b0b7c5eda33e58786768UnavailableNone listed
3c44bba1d270cb1620b4fe76786d0968118cb86baffectedgit8f97eeb02a553cdc78c83a0596448a370e1518c4UnavailableNone listed
3c44bba1d270cb1620b4fe76786d0968118cb86baffectedgit513787ff9a331b461115e8a145a983d650a84fcbUnavailableNone listed
3c44bba1d270cb1620b4fe76786d0968118cb86baffectedgit95df720e64a6409d8152827a776c43f615e3321aUnavailableNone listed
3c44bba1d270cb1620b4fe76786d0968118cb86baffectedgit8df1dc04ce0e4c03b51a756749c250a9cb17d707UnavailableNone listed
3c44bba1d270cb1620b4fe76786d0968118cb86baffectedgita2a694e6edbdb3efb34e1613a31fdcf6cf444a55UnavailableNone listed
3c44bba1d270cb1620b4fe76786d0968118cb86baffectedgit13a7c8964afcd8ca43c0b6001ebb0127baa95362UnavailableNone listed

Linux

Vendor
Linux
Product
Linux
Platforms
Unknown
Default status
affected
Linux · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
3.14affectedUnavailableUnavailableUnavailableNone listed
0unaffectedsemver3.14UnavailableNone listed
4.14.303unaffectedsemverUnavailable4.14.*None listed
4.19.270unaffectedsemverUnavailable4.19.*None listed
5.4.229unaffectedsemverUnavailable5.4.*None listed
5.10.163unaffectedsemverUnavailable5.10.*None listed
5.15.87unaffectedsemverUnavailable5.15.*None listed
6.0.19unaffectedsemverUnavailable6.0.*None listed
6.1.5unaffectedsemverUnavailable6.1.*None listed
6.2unaffectedoriginal_commit_for_fixUnavailable*None listed