In the Linux kernel, the following vulnerability has been resolved: scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails fcoe_init() calls fcoe_transport_attach(&fcoe_sw_transport), but when fcoe_if_init() fails, &fcoe_sw_transport is not detached and leaves freed &fcoe_sw_transport on fcoe_transports list. This causes panic when reinserting module. BUG: unable to handle page fault for address: fffffbfff82e2213 RIP: 0010:fcoe_transport_attach+0xe1/0x230 [libfcoe] Call Trace: <TASK> do_one_initcall+0xd0/0x4e0 load_module+0x5eee/0x7210 ...

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/09a60f908d8b6497f618113b7c3c31267dc90911 cve-icon cve-icon
https://git.kernel.org/stable/c/1dc499c615aa87dc46a3f2d1f91d2d358e55f3e3 cve-icon cve-icon
https://git.kernel.org/stable/c/22e8c7a56bb1cd2ed0beaaccb34282ac9cbbe27e cve-icon cve-icon
https://git.kernel.org/stable/c/4155658cee394b22b24c6d64e49247bf26d95b92 cve-icon cve-icon
https://git.kernel.org/stable/c/aef82d16be5a353d913163f26fc4385e296be2b8 cve-icon cve-icon
https://git.kernel.org/stable/c/b5cc59470df64f26ad397dbb71cbf130cf489edf cve-icon cve-icon
https://git.kernel.org/stable/c/be5f1a82ad6056db22c86005dc4cac22a20deeef cve-icon cve-icon
https://git.kernel.org/stable/c/cf74d1197c0e3d2f353faa333e9e2847c73713f1 cve-icon cve-icon
https://git.kernel.org/stable/c/d581303d6f8d4139513105d73dd65f26c6707160 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025091854-CVE-2022-50414-a99a@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-50414 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-50414 cve-icon
History

Fri, 19 Sep 2025 09:45:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Fri, 19 Sep 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

threat_severity

Important

Thu, 18 Sep 2025 16:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails fcoe_init() calls fcoe_transport_attach(&fcoe_sw_transport), but when fcoe_if_init() fails, &fcoe_sw_transport is not detached and leaves freed &fcoe_sw_transport on fcoe_transports list. This causes panic when reinserting module. BUG: unable to handle page fault for address: fffffbfff82e2213 RIP: 0010:fcoe_transport_attach+0xe1/0x230 [libfcoe] Call Trace: <TASK> do_one_initcall+0xd0/0x4e0 load_module+0x5eee/0x7210 ...
Title scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-09-18T16:03:58.156Z

Updated: 2025-09-18T16:03:58.156Z

Reserved: 2025-09-17T14:53:07.002Z

Link: CVE-2022-50414

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2025-09-18T16:15:44.740

Modified: 2025-09-18T16:15:44.740

Link: CVE-2022-50414

cve-icon Redhat

Severity : Important

Publid Date: 2025-09-18T00:00:00Z

Links: CVE-2022-50414 - Bugzilla