In the Linux kernel, the following vulnerability has been resolved:
net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings()
In qlcnic_83xx_add_rings(), the indirect function of ahw->hw_ops->alloc_mbx_args will be called to allocate memory for cmd.req.arg, and there is a dereference of it in qlcnic_83xx_add_rings(), which could lead to a NULL pointer dereference on failure of the indirect function like qlcnic_83xx_alloc_mbx_args().
Fix this bug by adding a check of alloc_mbx_args(), this patch imitates the logic of mbx_cmd()'s failure handling.
This bug was found by a static analyzer. The analysis employs differential checking to identify inconsistent security operations (e.g., checks or kfrees) between two code paths and confirms that the inconsistent operations are not recovered in the current function or the callers, so they constitute bugs.
Note that, as a bug found by static analysis, it can be a false positive or hard to trigger. Multiple researchers have cross-reviewed the bug.
Builds with CONFIG_QLCNIC=m show no new warnings, and our static analyzer no longer warns about this code.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.93-87.444Upgrade kernel-toolsUpgrade bpftool | Dec 12, 2024 | May 24, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 24, 2024 |
| Suse | — | Upgrade kernel-macrosUpgrade kernel-rt-optionalUpgrade dtb-marvellUpgrade dtb-amlogicUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-64kb-optionalUpgrade kernel-azureUpgrade kernel-azure-extraUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-defaultUpgrade dtb-renesasUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-default-baseUpgrade dlm-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-azureUpgrade dtb-lgUpgrade gfs2-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-syms-rtUpgrade dtb-freescaleUpgrade kernel-debugUpgrade kselftests-kmp-rtUpgrade kernel-default-extraUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debugUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade kernel-64kb-livepatch-develUpgrade kernel-source-azureUpgrade kernel-debug-vdsoUpgrade kernel-source-rtUpgrade dtb-amdUpgrade dtb-socionextUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-develUpgrade kernel-kvmsmall-develUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-64kbUpgrade kernel-azure-optionalUpgrade dtb-amazonUpgrade kernel-default-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-zfcpdumpUpgrade dtb-appleUpgrade dtb-hisiliconUpgrade dtb-broadcomUpgrade dtb-rockchipUpgrade dtb-sprdUpgrade kernel-devel-azureUpgrade kernel-default-base-rebuildUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade dlm-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-64kb-develUpgrade kernel-azure-develUpgrade dtb-apmUpgrade kernel-symsUpgrade dtb-mediatekUpgrade kernel-preempt-develUpgrade kernel-syms-azureUpgrade kernel-defaultUpgrade kernel-develUpgrade kernel-default-optionalUpgrade kernel-rt-develUpgrade gfs2-kmp-rtUpgrade dtb-alteraUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-default-vdsoUpgrade kselftests-kmp-64kbUpgrade dtb-exynosUpgrade dtb-armUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-rt-extraUpgrade kernel-preemptUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade dtb-caviumUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-sourceUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-devel-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-livepatch | Aug 9, 2024 | May 24, 2024 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1173-awsUpgrade linux-image-awsUpgrade linux-image-4.4.0-258-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-genericUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1136-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1135-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-258-generic | Nov 19, 2024 | May 24, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 24, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub