CVE-2022-50242

In the Linux kernel, the following vulnerability has been resolved:

drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init()

If vp alloc failed in qlcnic_sriov_init(), all previously allocated vp needs to be freed.

The change fixes a memory leak in qlcnic_sriov_init() on error paths when allocating VFs. It does not enable memory corruption or privilege escalation. Triggering requires administrative control over the host (enabling SR-IOV / probing the qlcnic driver). Impact is limited to a small local availability degradation during failed initialization attempts.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.