In the Linux kernel, the following vulnerability has been resolved:
nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid()
The nvme_fc_fcp_op structure describing an AEN operation is initialized with a null request structure pointer. An FC LLDD may make a call to nvme_fc_io_getuuid passing a pointer to an nvmefc_fcp_req for an AEN operation.
Add validation of the request structure pointer before dereference.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 2, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 2, 2024 |
| Suse | — | Upgrade kernel-source-azureUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-lgUpgrade kernel-rt_debug-develUpgrade dtb-alteraUpgrade gfs2-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-64kbUpgrade kernel-obs-qaUpgrade gfs2-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-extraUpgrade dtb-marvellUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade kernel-azure-extraUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-default-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-livepatchUpgrade kernel-sourceUpgrade kernel-rt-optionalUpgrade kernel-default-develUpgrade kernel-develUpgrade kernel-preemptUpgrade kernel-zfcpdumpUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-rtUpgrade dtb-amazonUpgrade dtb-xilinxUpgrade ocfs2-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-rtUpgrade kernel-debugUpgrade kselftests-kmp-64kbUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-azureUpgrade dtb-amlogicUpgrade dtb-exynosUpgrade kernel-azure-develUpgrade dtb-caviumUpgrade dtb-qcomUpgrade dtb-freescaleUpgrade kernel-macrosUpgrade dlm-kmp-64kbUpgrade kernel-64kb-optionalUpgrade dtb-apmUpgrade dtb-appleUpgrade dtb-broadcomUpgrade kernel-preempt-develUpgrade kernel-azureUpgrade ocfs2-kmp-azureUpgrade dtb-renesasUpgrade kselftests-kmp-rtUpgrade kernel-defaultUpgrade kernel-rt_debugUpgrade kernel-default-base-rebuildUpgrade kernel-rt-develUpgrade dtb-socionextUpgrade kernel-syms-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-devel-rtUpgrade dtb-rockchipUpgrade dtb-amdUpgrade kernel-azure-vdsoUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade cluster-md-kmp-defaultUpgrade dtb-allwinnerUpgrade dlm-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-azureUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-rt-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-debug-vdsoUpgrade dtb-mediatekUpgrade reiserfs-kmp-rtUpgrade kernel-docsUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-defaultUpgrade dtb-armUpgrade kernel-default-baseUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-azureUpgrade kernel-default-livepatch-devel | Apr 17, 2024 | Mar 2, 2024 |
| Ubuntu | — | Upgrade linux-nvidia-6.5 | Nov 19, 2024 | Mar 2, 2024 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub