CVE-2024-35930scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- 5.5MediumCVSS base score
- 0.22%Exploitation in 30 daysEPSS · top 87% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() The call to lpfc_sli4_resume_rpi() in lpfc_rcv_padisc() may return an unsuccessful status. In such cases, the elsiocb is not issued, the completion is not called, and thus the elsiocb resource is leaked. Check return value after calling lpfc_sli4_resume_rpi() and conditionally release the elsiocb resource.
Timeline
ID reserved
By Linux
- 2 days later
· 2 days later
Published
- 2 years later
· 2 years later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.22% · top 87% of all CVEs (14 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.
Affected products
- affected 6b5151fd7baec6812fece993ddd7a2cf9fd0125f – < edf82aa7e9eb864a09229392054d131b34a5c9e8
- affected 6b5151fd7baec6812fece993ddd7a2cf9fd0125f – < e2cd32435b1dff3d63759476a3abc878e02fb6c8
- affected 6b5151fd7baec6812fece993ddd7a2cf9fd0125f – < c473288f27d15014447de5a891bdf22a0695847a
- affected 6b5151fd7baec6812fece993ddd7a2cf9fd0125f – < 7849e6f8410da96384e3d1f6b6d730f095142dc7
- affected 6b5151fd7baec6812fece993ddd7a2cf9fd0125f – < ee0b5f96b6d66a1e6698228dcb41df11ec7f352f
- affected 6b5151fd7baec6812fece993ddd7a2cf9fd0125f – < 07a2aa674fca679316b8ac51440adb895b53a7cf
- affected 6b5151fd7baec6812fece993ddd7a2cf9fd0125f – < 3320126ed3afbc11934502319b340f91a4d61c8f
- affected 6b5151fd7baec6812fece993ddd7a2cf9fd0125f – < 2ae917d4bcab80ab304b774d492e2fcd6c52c06b
- affected 3.4
- unaffected < 3.4
- unaffected 4.19.312 – ≤ 4.19.*
- unaffected 5.4.274 – ≤ 5.4.*
- unaffected 5.10.215 – ≤ 5.10.*
- unaffected 5.15.155 – ≤ 5.15.*
- unaffected 6.1.86 – ≤ 6.1.*
- unaffected 6.6.27 – ≤ 6.6.*
- unaffected 6.8.6 – ≤ 6.8.*
- unaffected 6.9 – ≤ *
References
References11
- https://git.kernel.org/stable/c/edf82aa7e9eb864a09229392054d131b34a5c9e8 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/e2cd32435b1dff3d63759476a3abc878e02fb6c8 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/c473288f27d15014447de5a891bdf22a0695847a (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/7849e6f8410da96384e3d1f6b6d730f095142dc7 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/ee0b5f96b6d66a1e6698228dcb41df11ec7f352f (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/07a2aa674fca679316b8ac51440adb895b53a7cf (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/3320126ed3afbc11934502319b340f91a4d61c8f (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/2ae917d4bcab80ab304b774d492e2fcd6c52c06b (opens in a new tab)x_transferred
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html (opens in a new tab)x_transferred
- https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html (opens in a new tab)x_transferred
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2024-35648 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2024-35930)Record last updated .