Linux Kernel SCSI LPFC NPIV PLOGI_RJT Memory Leak Vulnerability

A memory leak vulnerability has been identified in the Linux kernel's SCSI LPFC driver, specifically related to NPIV ports handling PLOGI_RJT responses. The issue arises in the functions lpfc_ignore_els_cmpl() and lpfc_els_rsp_reject(), where memory allocated for PLOGI_RJT responses is not properly freed. This vulnerability can lead to resource exhaustion over time as leaked memory is not returned to the system.

Impact

Exploitation of this vulnerability can cause a memory leak, leading to increased memory usage and potential resource exhaustion.

Remediation

The vulnerability has been addressed in the Linux kernel. Users should upgrade to the latest version where this issue has been fixed.