Linux Distros Unpatched Vulnerability : CVE-2022-48650

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix memory leak in qlt24xxhandleabts Commit 8f394da36a36 scsi: qla2xxx: Drop...

CVE-2022-48650

CVE-2022-48650 is a memory leak in the Linux kernel's scsi: qla2xxx driver (QLogic Fibre Channel HBA). The __qlt_24xx_handle_abts() function returns early when tcm_qla2xxx_find_cmd_by_tag() fails to find a command, but does not free the already-allocated memory for the management command. This wa...