In the Linux kernel, the following vulnerability has been resolved:
scsi: lpfc: Fix null pointer dereference in lpfc_prep_els_iocb()
It is possible to call lpfc_issue_els_plogi() passing a did for which no matching ndlp is found. A call is then made to lpfc_prep_els_iocb() with a null pointer to a lpfc_nodelist structure resulting in a null pointer dereference.
Fix by returning an error status if no valid ndlp is found. Fix up comments regarding ndlp reference counting.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 28, 2024 |
| Suse | — | Upgrade kernel-default-manUpgrade kernel-syms-azureUpgrade kernel-zfcpdumpUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade kernel-64kbUpgrade kernel-azure-baseUpgrade kernel-default-develUpgrade kernel-preemptUpgrade kernel-symsUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-64kb-develUpgrade kernel-default-baseUpgrade kernel-obs-buildUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade kernel-source-azureUpgrade kernel-defaultUpgrade kernel-azureUpgrade kernel-preempt-devel | Aug 9, 2024 | Feb 28, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub