CVE-2022-49114

A vulnerability was found in the Linux kernel's SCSI libfc library in the fc_exch_abts_resp() function, which can lead to a use-after-free scenario. This issue can occur because the function calls fc_exch_release(), which decrements a reference count stored in the ep object and then frees the object once the count is zero. However, the ep object is referenced again and can result in the now-freed ep pointer being accessed, resulting in system instability, memory corruption, and potential arbitrary code execution.

This vulnerability is rated as Moderate rather than Important because exploitation requires local access, specific Fibre Channel exchange abort conditions, and precise timing to trigger the use-after-free condition. The libfc subsystem is not utilized unless Fibre Channel or Fibre Channel over Ethernet (FCoE) hardware and services are explicitly configured in the environment. On standard Red Hat Enterprise Linux installations lacking Fibre Channel SAN storage, this driver module is not loaded by default, substantially reducing exposure. If successfully triggered, the flaw could lead to a kernel crash and system instability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.