CVE-2023-53603

Summary

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Avoid fcport pointer dereference

Klocwork reported warning of NULL pointer may be dereferenced. The routine exits when sa_ctl is NULL and fcport is allocated after the exit call thus causing NULL fcport pointer to dereference at the time of exit.

To avoid fcport pointer dereference, exit the routine when sa_ctl is NULL.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux7b2fbfa4b2cd3a24c1760b85d842e928070d4744 < 4406fe8a96a946c7ea5724ee59625755a1d9c59daffected
LinuxLinuxe0fb8ce2bb9e52c846e54ad2c58b5b7beb13eb09 < 477bc74ad1add644b606bff6ba1284943c42818aaffected
LinuxLinuxe0fb8ce2bb9e52c846e54ad2c58b5b7beb13eb09 < 7bbeff613ec0560fb2f6f8b405288f3f043adf64affected
LinuxLinuxe0fb8ce2bb9e52c846e54ad2c58b5b7beb13eb09 < 6b504d06976fe4a61cc05dedc68b84fadb397f77affected
LinuxLinux47b583ad1f7e459689eb1bdd222279a6986ccd69affected
LinuxLinuxd2deafaef0330a863b5e046c1154b605588d19f7affected
LinuxLinux5.15.61 < 5.15.121affected
LinuxLinux5.18.18 < 5.19affected
LinuxLinux5.19.2 < 5.20affected
LinuxLinux6.0affected
LinuxLinux0 < 6.0unaffected
LinuxLinux5.15.121 <= 5.15.*unaffected
LinuxLinux6.1.40 <= 6.1.*unaffected
LinuxLinux6.4.5 <= 6.4.*unaffected
LinuxLinux6.5 <= *unaffected

Weaknesses

References