Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-54289

scsi: qedf: Fix NULL dereference in error handling

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Fix NULL dereference in error handling Smatch reported: drivers/scsi/qedf/qedf_main.c:3056 qedf_alloc_global_queues() warn: missing unwind goto? At this point in the function, nothing has been allocated so we can return directly. In particular the "qedf->global_queues" have not been allocated so calling qedf_free_global_queues() will lead to a NULL dereference when we check if (!gl[i]) and "gl" is NULL.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 61d8658b4a435eac729966cc94cdda077a8df5cd to < 961c8370c5f7e80a267680476e1bcff34bffe71aaffected
  • 61d8658b4a435eac729966cc94cdda077a8df5cd to < ac64019e4d4b08c23edb117e0b2590985e33de1daffected
  • 61d8658b4a435eac729966cc94cdda077a8df5cd to < b1de5105d29b145b727b797e2d5de071ab3a7ca1affected
  • 61d8658b4a435eac729966cc94cdda077a8df5cd to < c316bde418af4c2a9df51149ed01d1bd8ca5bebfaffected
  • 61d8658b4a435eac729966cc94cdda077a8df5cd to < 08c001c1e9444a3046c79a99aa93ac48073b18ccaffected
  • 61d8658b4a435eac729966cc94cdda077a8df5cd to < 271c9b2eb60149afbeab28cb39e52f73bde9900caffected
  • 61d8658b4a435eac729966cc94cdda077a8df5cd to < f025312b089474a54e4859f3453771314d9e3d4faffected

Linux Linux

Default version status: affected

  • 4.11affected
  • 0 to < 4.11unaffected
  • 5.4.251 to ≤ 5.4.*unaffected
  • 5.10.188 to ≤ 5.10.*unaffected
  • 5.15.121 to ≤ 5.15.*unaffected
  • 6.1.39 to ≤ 6.1.*unaffected
  • 6.3.13 to ≤ 6.3.*unaffected
  • 6.4.4 to ≤ 6.4.*unaffected
  • 6.5 to ≤ *unaffected

References