In the Linux kernel, the following vulnerability has been resolved:
scsi: lpfc: Fix null pointer dereference in lpfc_prep_els_iocb()
It is possible to call lpfc_issue_els_plogi() passing a did for which no matching ndlp is found. A call is then made to lpfc_prep_els_iocb() with a null pointer to a lpfc_nodelist structure resulting in a null pointer dereference.
Fix by returning an error status if no valid ndlp is found. Fix up comments regarding ndlp reference counting.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 28, 2024 |
| Suse | — | Upgrade kernel-preemptUpgrade kernel-devel-azureUpgrade kernel-docsUpgrade kernel-azure-develUpgrade kernel-syms-azureUpgrade kernel-azure-baseUpgrade kernel-macrosUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-default-manUpgrade kernel-64kbUpgrade kernel-default-extraUpgrade kernel-default-develUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade kernel-defaultUpgrade kernel-64kb-develUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade kernel-preempt-develUpgrade kernel-source-azureUpgrade kernel-default-base | Aug 9, 2024 | Feb 28, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub