CVE-2023-53150

scsi: qla2xxx: Pointer may be dereferenced

Published: 9/15/2025 Last updated: 9/15/2025 Reserved: 5/2/2025

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Pointer may be dereferenced Klocwork tool reported pointer 'rport' returned from call to function fc_bsg_to_rport() may be NULL and will be dereferenced. Add a fix to validate rport before dereferencing.

CNA assigner: Linux (416baaa9-dc9f-4396-8d5f-8c081fb06d67) Requested by: n/a

Opam packages affected (27)

albatross cdrom conf-bpftool conf-libbpf conf-linux-libc-dev core core_unix hvsock mirage-block-unix mm ocaml-probes orun rawlink rawlink-eio rawlink-lwt shell solo5 solo5-bindings-hvt solo5-bindings-spt solo5-cross-aarch64 solo5-kernel-ukvm tracy-client tuntap uring vhd-format vhd-format-lwt xapi-stdext-unix

Products affected (1)

Product	Vendor	Version
Linux	Linux	< publication

References (8)

https://git.kernel.org/stable/c/005961bd8f066fe931104f67c34ebfcc7f240099
https://git.kernel.org/stable/c/a69125a3ce88d9a386872034e7664b30cc4bcbed
https://git.kernel.org/stable/c/3f22f9ddbb29dba369daddb084be3bacf1587529
https://git.kernel.org/stable/c/5addd62586a94a572359418464ce0ae12fa46187
https://git.kernel.org/stable/c/0715da51391d223bf4981e28346770edea7eeb74
https://git.kernel.org/stable/c/b06d1b525364bbcf4929b4b35d81945b10dc9883
https://git.kernel.org/stable/c/22b1d7c8bb59c3376430a8bad5840194b12bf29a
https://git.kernel.org/stable/c/00eca15319d9ce8c31cdf22f32a3467775423df4