Not yet scoredPublished Dec 24, 2025

CVE-2022-50727scsi: efct: Fix possible memleak in efct_device_init()

Updated under an hour ago (Oct 27, 2026, 2:30 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: scsi: efct: Fix possible memleak in efct_device_init() In efct_device_init(), when efct_scsi_reg_fc_transport() fails, efct_scsi_tgt_driver_exit() is not called to release memory for efct_scsi_tgt_driver_init() and causes memleak: unreferenced object 0xffff8881020ce000 (size 2048): comm "modprobe", pid 465, jiffies 4294928222 (age 55.872s) backtrace: [<0000000021a1ef1b>] kmalloc_trace+0x27/0x110 [<000000004c3ed51c>] target_register_template+0x4fd/0x7b0 [target_core_mod] [<00000000f3393296>] efct_scsi_tgt_driver_init+0x18/0x50 [efct] [<00000000115de533>] 0xffffffffc0d90011 [<00000000d608f646>] do_one_initcall+0xd0/0x4e0 [<0000000067828cf1>] do_init_module+0x1cc/0x6a0 ...

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 4df84e8466242de835416a4ec0c856c0e2ed26eb before 038359eeccffaf0de4c1c9c51ee19cc5649619a1; 4df84e8466242de835416a4ec0c856c0e2ed26eb builds before 0c6e6bb30229b1297ac0fd7ede2941d2322fc736; from 4df84e8466242de835416a4ec0c856c0e2ed26eb before c7e96168a8ca3be96c4959475164bef31115f07e; from 4df84e8466242de835416a4ec0c856c0e2ed26eb before bb0cd225dd37df1f4a22e36dad59ff33178ecdfc	CNA record

References

References

https://git.kernel.org/stable/c/038359eeccffaf0de4c1c9c51ee19cc5649619a1
https://git.kernel.org/stable/c/0c6e6bb30229b1297ac0fd7ede2941d2322fc736
https://git.kernel.org/stable/c/c7e96168a8ca3be96c4959475164bef31115f07e
https://git.kernel.org/stable/c/bb0cd225dd37df1f4a22e36dad59ff33178ecdfc

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.