In the Linux kernel, the following vulnerability has been resolved:
net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings()
In qlcnic_83xx_add_rings(), the indirect function of ahw->hw_ops->alloc_mbx_args will be called to allocate memory for cmd.req.arg, and there is a dereference of it in qlcnic_83xx_add_rings(), which could lead to a NULL pointer dereference on failure of the indirect function like qlcnic_83xx_alloc_mbx_args().
Fix this bug by adding a check of alloc_mbx_args(), this patch imitates the logic of mbx_cmd()'s failure handling.
This bug was found by a static analyzer. The analysis employs differential checking to identify inconsistent security operations (e.g., checks or kfrees) between two code paths and confirms that the inconsistent operations are not recovered in the current function or the callers, so they constitute bugs.
Note that, as a bug found by static analysis, it can be a false positive or hard to trigger. Multiple researchers have cross-reviewed the bug.
Builds with CONFIG_QLCNIC=m show no new warnings, and our static analyzer no longer warns about this code.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.10.93-87.444Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade perfUpgrade kernel-develUpgrade perf-debuginfo | Dec 12, 2024 | May 24, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 24, 2024 |
| Suse | — | Upgrade kernel-debug-develUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-defaultUpgrade dtb-lgUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-macrosUpgrade kernel-default-livepatch-develUpgrade kernel-azureUpgrade kselftests-kmp-defaultUpgrade dtb-amdUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-optionalUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-azure-extraUpgrade kernel-default-baseUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amlogicUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-debug-livepatch-develUpgrade kernel-default-extraUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-azureUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade dtb-hisiliconUpgrade kernel-docs-htmlUpgrade kernel-source-rtUpgrade kernel-docsUpgrade kernel-rt_debugUpgrade kernel-source-azureUpgrade dtb-appleUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-debugUpgrade kernel-source-vanillaUpgrade dtb-freescaleUpgrade kernel-64kbUpgrade kernel-64kb-extraUpgrade dtb-amazonUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-azureUpgrade dtb-renesasUpgrade dtb-socionextUpgrade kernel-default-develUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-obs-qaUpgrade dtb-xilinxUpgrade kernel-kvmsmallUpgrade dtb-qcomUpgrade kernel-preemptUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-devel-azureUpgrade dtb-armUpgrade kernel-rtUpgrade kernel-default-optionalUpgrade kernel-default-vdsoUpgrade gfs2-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade dtb-apmUpgrade kernel-symsUpgrade kernel-preempt-develUpgrade kernel-64kb-develUpgrade kernel-azure-develUpgrade kernel-devel-rtUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade dlm-kmp-rtUpgrade dtb-alteraUpgrade kernel-sourceUpgrade kernel-rt-develUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade kernel-rt-livepatchUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-obs-buildUpgrade dtb-allwinnerUpgrade dtb-nvidiaUpgrade gfs2-kmp-rtUpgrade dtb-mediatekUpgrade kernel-rt-extraUpgrade kernel-syms-azureUpgrade kernel-develUpgrade dtb-cavium | Aug 9, 2024 | May 24, 2024 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1136-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-258-genericUpgrade linux-image-4.4.0-1135-awsUpgrade linux-image-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-258-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1173-awsUpgrade linux-image-aws | Nov 19, 2024 | May 24, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub