Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-53603

scsi: qla2xxx: Avoid fcport pointer dereference

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Avoid fcport pointer dereference Klocwork reported warning of NULL pointer may be dereferenced. The routine exits when sa_ctl is NULL and fcport is allocated after the exit call thus causing NULL fcport pointer to dereference at the time of exit. To avoid fcport pointer dereference, exit the routine when sa_ctl is NULL.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 7b2fbfa4b2cd3a24c1760b85d842e928070d4744 to < 4406fe8a96a946c7ea5724ee59625755a1d9c59daffected
  • e0fb8ce2bb9e52c846e54ad2c58b5b7beb13eb09 to < 477bc74ad1add644b606bff6ba1284943c42818aaffected
  • e0fb8ce2bb9e52c846e54ad2c58b5b7beb13eb09 to < 7bbeff613ec0560fb2f6f8b405288f3f043adf64affected
  • e0fb8ce2bb9e52c846e54ad2c58b5b7beb13eb09 to < 6b504d06976fe4a61cc05dedc68b84fadb397f77affected
  • 47b583ad1f7e459689eb1bdd222279a6986ccd69affected
  • d2deafaef0330a863b5e046c1154b605588d19f7affected
  • 5.15.61 to < 5.15.121affected
  • 5.18.18 to < 5.19affected
  • 5.19.2 to < 5.20affected

Linux Linux

Default version status: affected

  • 6.0affected
  • 0 to < 6.0unaffected
  • 5.15.121 to ≤ 5.15.*unaffected
  • 6.1.40 to ≤ 6.1.*unaffected
  • 6.4.5 to ≤ 6.4.*unaffected
  • 6.5 to ≤ *unaffected

References