scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.21 % · centile 11 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Deferred
Rechercher sur…
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() Klocwork reported warning of rport maybe NULL and will be dereferenced. rport returned by call to fc_bsg_to_rport() could be NULL and dereferenced. Check valid rport returned by fc_bsg_to_rport().
Références
- https://git.kernel.org/stable/c/f35bd94b4e11c41de90cd0fa72c9062e8196822f
- https://git.kernel.org/stable/c/ccd3bc595bda67db5a347b9050c2df28f292d3fb
- https://git.kernel.org/stable/c/1b7e5bdf2be22ae8c61bdca5a5f96ec2746e9639
- https://git.kernel.org/stable/c/921d6844625527a92d1178262a633cc88a8e61bd
- https://git.kernel.org/stable/c/1ccd52b790a66b8b5f75c87eab8c3a37f941a2bf
- https://git.kernel.org/stable/c/e466930717ef18c112585a39fc6174d8eb441df5
- https://git.kernel.org/stable/c/ced5460eae772e847debbc0b65ef93aedab92d3f
- https://git.kernel.org/stable/c/af73f23a27206ffb3c477cac75b5fcf03410556e
Références européennes
- ENISA EUVD · EUVD-2025-205116
- GCVE · GCVE-0-2023-54014
Avis du CERT-FR
- CERTFR-2026-AVI-0369 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0247 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0225 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0170 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0108 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected 75cc8cfc6e13d42d50c2bf4307d0a68c2a70f709 < f35bd94b4e11c41de90cd0fa72c9062e8196822f ; affected 75cc8cfc6e13d42d50c2bf4307d0a68c2a70f709 < ccd3bc595bda67db5a347b9050c2df28f292d3fb ; affected 75cc8cfc6e13d42d50c2bf4307d0a68c2a70f709 < 1b7e5bdf2be22ae8c61bdca5a5f96ec2746e9639 ; affected 75cc8cfc6e13d42d50c2bf4307d0a68c2a70f709 < 921d6844625527a92d1178262a633cc88a8e61bd ; affected 75cc8cfc6e13d42d50c2bf4307d0a68c2a70f709 < 1ccd52b790a66b8b5f75c87eab8c3a37f941a2bf ; affected 75cc8cfc6e13d42d50c2bf4307d0a68c2a70f709 < e466930717ef18c112585a39fc6174d8eb441df5 |
| Linux · Linux | affected 4.10 ; unaffected 0 < 4.10 ; unaffected 4.14.322 ≤ 4.14.* ; unaffected 4.19.291 ≤ 4.19.* ; unaffected 5.4.251 ≤ 5.4.* ; unaffected 5.10.188 ≤ 5.10.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |