Linux Kernel SCSI lpfc Resource Leak Vulnerability

A resource leak vulnerability has been identified in the Linux kernel's SCSI lpfc driver. When the lpfc_complete_unsol_iocb() function receives a frame with an unhandled type, the frame is discarded, leading to a leak of resources. The vulnerability arises because the function fails to properly return resources before dropping the frame. Additionally, the handling of NOP basic link service in the lpfc_fc_frame_check() function requires an update.

Impact

Exploitation of this vulnerability leads to a resource leak, where resources are not properly returned after an unhandled frame type is discarded. This can potentially cause memory exhaustion or other resource-related issues.