What’s Vulnerable › Vulnerabilities

CVE-2024-35930: scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-19 · updated 2026-10-15
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() The call to lpfc_sli4_resume_rpi() in lpfc_rcv_padisc() may return an unsuccessful status. In such cases, the elsiocb is not issued, the completion is not called, and thus the elsiocb resource is leaked. Check return value after calling lpfc_sli4_resume_rpi() and conditionally release the elsiocb resource.

Affected products

• Debian Linux: 10.0
• Linux kernel: before 4.19.312; from 4.20 before 5.4.274; from 5.5 before 5.10.215; from 5.11 before 5.15.155; from 5.16 before 6.1.86; from 6.2 before 6.6.27 — fixed in 4.19.312, 5.10.215, 5.15.155, 5.4.274, 6.1.86, 6.6.27

How to fix

Upgrade to a fixed version: Linux kernel 4.19.312, 5.10.215, 5.15.155, 5.4.274. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/07a2aa674fca679316b8ac51440adb895b53a7cf
• https://git.kernel.org/stable/c/2ae917d4bcab80ab304b774d492e2fcd6c52c06b
• https://git.kernel.org/stable/c/3320126ed3afbc11934502319b340f91a4d61c8f
• https://git.kernel.org/stable/c/7849e6f8410da96384e3d1f6b6d730f095142dc7
• https://git.kernel.org/stable/c/c473288f27d15014447de5a891bdf22a0695847a
• https://git.kernel.org/stable/c/e2cd32435b1dff3d63759476a3abc878e02fb6c8
• https://git.kernel.org/stable/c/edf82aa7e9eb864a09229392054d131b34a5c9e8
• https://git.kernel.org/stable/c/ee0b5f96b6d66a1e6698228dcb41df11ec7f352f
• https://git.kernel.org/stable/c/07a2aa674fca679316b8ac51440adb895b53a7cf
• https://git.kernel.org/stable/c/2ae917d4bcab80ab304b774d492e2fcd6c52c06b
• https://git.kernel.org/stable/c/3320126ed3afbc11934502319b340f91a4d61c8f
• https://git.kernel.org/stable/c/7849e6f8410da96384e3d1f6b6d730f095142dc7

Get alerted when CVE-2024-35930 or the next vulnerability affects your stack