In the Linux kernel, the following vulnerability has been resolved:
nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid()
The nvme_fc_fcp_op structure describing an AEN operation is initialized with a null request structure pointer. An FC LLDD may make a call to nvme_fc_io_getuuid passing a pointer to an nvmefc_fcp_req for an AEN operation.
Add validation of the request structure pointer before dereference.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 2, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 2, 2024 |
| Suse | — | Upgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade dtb-marvellUpgrade kernel-64kb-develUpgrade kernel-azure-extraUpgrade kernel-rt-livepatchUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade kernel-rt-optionalUpgrade kernel-source-rtUpgrade gfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-rtUpgrade kernel-syms-azureUpgrade dtb-hisiliconUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-vdsoUpgrade dtb-caviumUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade dtb-exynosUpgrade kernel-azure-develUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-source-azureUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-rtUpgrade kernel-64kbUpgrade kernel-default-optionalUpgrade dlm-kmp-64kbUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-symsUpgrade dtb-alteraUpgrade kernel-docs-htmlUpgrade kernel-kvmsmallUpgrade dtb-freescaleUpgrade gfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-rtUpgrade dtb-amlogicUpgrade dtb-apmUpgrade kernel-debugUpgrade dtb-qcomUpgrade dtb-lgUpgrade dtb-appleUpgrade kernel-default-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-preemptUpgrade kernel-sourceUpgrade ocfs2-kmp-defaultUpgrade kernel-develUpgrade dtb-xilinxUpgrade dtb-amazonUpgrade kernel-default-develUpgrade kernel-azure-vdsoUpgrade dlm-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-develUpgrade kernel-debug-vdsoUpgrade dtb-socionextUpgrade dtb-mediatekUpgrade kernel-debug-livepatch-develUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade dtb-amdUpgrade dtb-sprdUpgrade kernel-devel-rtUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-debug-develUpgrade kernel-rt-extraUpgrade dtb-allwinnerUpgrade kernel-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-preempt-develUpgrade kernel-default-baseUpgrade gfs2-kmp-defaultUpgrade dtb-armUpgrade kernel-docsUpgrade kernel-default-livepatch-develUpgrade dtb-renesasUpgrade kernel-rt_debugUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-azureUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-syms-rt | Apr 17, 2024 | Mar 2, 2024 |
| Ubuntu | — | Upgrade linux-nvidia-6.5 | Nov 19, 2024 | Mar 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub