In the Linux kernel, the following vulnerability has been resolved:
scsi: lpfc: Fix null pointer dereference in lpfc_prep_els_iocb()
It is possible to call lpfc_issue_els_plogi() passing a did for which no matching ndlp is found. A call is then made to lpfc_prep_els_iocb() with a null pointer to a lpfc_nodelist structure resulting in a null pointer dereference.
Fix by returning an error status if no valid ndlp is found. Fix up comments regarding ndlp reference counting.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 28, 2024 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade kernel-azure-develUpgrade kernel-default-develUpgrade kernel-default-manUpgrade kernel-macrosUpgrade kernel-docsUpgrade kernel-64kbUpgrade kernel-azure-baseUpgrade kernel-devel-azureUpgrade kernel-preemptUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade kernel-develUpgrade kernel-preempt-develUpgrade kernel-default-baseUpgrade kernel-64kb-develUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-source-azureUpgrade kernel-azureUpgrade reiserfs-kmp-default | Aug 9, 2024 | Feb 28, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub