CVE-2022-50467

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix null ndlp ptr dereference in abnormal exit path for GFT_ID An error case exit from lpfc_cmpl_ct_cmd_gft_id() results in a call to lpfc_nlp_put() with a null pointer to a nodelist structure. Changed lpfc_cmpl_ct_cmd_gft_id() to initialize nodelist pointer upon entry.

Score

CVSS 3.1 5.5 Medium

Status

Analyzed - 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Published

2025-10-01

Last modified

2026-05-11

Weaknesses

CWE-476

Affected products

• Linux Kernel (Linux)

References

• https://git.kernel.org/stable/c/04e7cd8c85636a329d1a6e5a269a7c8b6f71c41c
• https://git.kernel.org/stable/c/59b7e210a522b836a01516c71ee85d1d92c1f075
• https://git.kernel.org/stable/c/82dc1fe4324e2c897f2ed1c66f4fcff03094ac3a