{"cve":"CVE-2022-50727","nvd":{"published":"2025-12-24T13:15:59.363","modified":"2026-06-17T05:24:04.530","status":"Deferred","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: efct: Fix possible memleak in efct_device_init()\n\nIn efct_device_init(), when efct_scsi_reg_fc_transport() fails,\nefct_scsi_tgt_driver_exit() is not called to release memory for\nefct_scsi_tgt_driver_init() and causes memleak:\n\nunreferenced object 0xffff8881020ce000 (size 2048):\n  comm \"modprobe\", pid 465, jiffies 4294928222 (age 55.872s)\n  backtrace:\n    [<0000000021a1ef1b>] kmalloc_trace+0x27/0x110\n    [<000000004c3ed51c>] target_register_template+0x4fd/0x7b0 [target_core_mod]\n    [<00000000f3393296>] efct_scsi_tgt_driver_init+0x18/0x50 [efct]\n    [<00000000115de533>] 0xffffffffc0d90011\n    [<00000000d608f646>] do_one_initcall+0xd0/0x4e0\n    [<0000000067828cf1>] do_init_module+0x1cc/0x6a0\n    ...","cvss_v4":null,"cvss_v3":null,"cwes":[],"references":["https://git.kernel.org/stable/c/038359eeccffaf0de4c1c9c51ee19cc5649619a1","https://git.kernel.org/stable/c/0c6e6bb30229b1297ac0fd7ede2941d2322fc736","https://git.kernel.org/stable/c/bb0cd225dd37df1f4a22e36dad59ff33178ecdfc","https://git.kernel.org/stable/c/c7e96168a8ca3be96c4959475164bef31115f07e"],"products":[],"source":"nvd","synced_at":"2026-10-19T22:17:07.138532058+00:00"},"epss":{"cve":"CVE-2022-50727","score":0.00244,"percentile":0.15678,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}