CVE-2022-50827

A memory leak vulnerability was found in the Linux kernel's lpfc SCSI driver. In lpfc_create_port(), when VMID resource allocation fails after scsi_host_alloc() succeeds, the error handling path fails to call scsi_host_put(), leading to a memory leak of the allocated SCSI host structure.

This memory leak occurs exclusively in a failure path during port creation, requiring VMID allocation to fail after host allocation succeeds. The leak only happens during driver initialization failures and does not represent an exploitable condition during normal operation, making the practical security impact minimal.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.