CVE-2022-50060

In the Linux kernel, the following vulnerability has been resolved:

octeontx2-af: Fix mcam entry resource leak

The teardown sequence in FLR handler returns if no NIX LF is attached to PF/VF because it indicates that graceful shutdown of resources already happened. But there is a chance of all allocated MCAM entries not being freed by PF/VF. Hence free mcam entries even in case of detached LF.

A resource leak was identified in the FLR (Function Level Reset) handler of the OcteonTX2 AF driver, where MCAM entries could remain allocated even after a function teardown, particularly when the NIX LF was already detached. This patch ensures that MCAM entries are explicitly freed to prevent memory exhaustion or hardware resource leakage. The issue requires high privileges (PR:H) as it occurs during device or virtual function management, and exploitation is local. The impact is limited to system availability due to leaked resources that may exhaust MCAM allocation capacity, justifying an availability impact of High (A:H).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.