CVE-2023-52809

scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()

State: Published
Severity: Not scored
Published: May 21, 2024
Updated: May 11, 2026
Reserved: May 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()

fc_lport_ptp_setup() did not check the return value of fc_rport_create() which can return NULL and would cause a NULL pointer dereference. Address this issue by checking return value of fc_rport_create() and log error message on fc_rport_create() failed.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to before 930f0aaba4820d6362de4e6ed569eaf444f1ea4eAffected 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to before 77072ec41d6ab3718c3fc639bc149b8037caedfaAffected 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to before b549acf999824d4f751ca57965700372f2f3ad00Affected 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to before bb83f79f90e92f46466adcfd4fd264a7ae0f0f01Affected 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to before 56d78b5495ebecbb9395101f3be177cd0a52450bAffected 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to before 442fd24d7b6b29e4a9cd9225afba4142d5f522baAffected 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to before f6fe7261b92b21109678747f36df9fdab1e30c34Affected 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to before 6b9ecf4e1032e645873933e5b43cbb84cac19106Affected 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to before 4df105f0ce9f6f30cda4e99f577150d23f0c9c5fAffected
LinuxLinux	2.6.29Affected before 2.6.29Not affected 4.14.331 through 4.14.Not affected 4.19.300 through 4.19.Not affected 5.4.262 through 5.4.Not affected 5.10.202 through 5.10.Not affected 5.15.140 through 5.15.Not affected 6.1.64 through 6.1.Not affected 6.5.13 through 6.5.Not affected 6.6.3 through 6.6.Not affected 6.7 and laterNot affected

Product

Versions

LinuxLinux

42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to before 930f0aaba4820d6362de4e6ed569eaf444f1ea4eAffected
42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to before 77072ec41d6ab3718c3fc639bc149b8037caedfaAffected
42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to before b549acf999824d4f751ca57965700372f2f3ad00Affected
42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to before bb83f79f90e92f46466adcfd4fd264a7ae0f0f01Affected
42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to before 56d78b5495ebecbb9395101f3be177cd0a52450bAffected
42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to before 442fd24d7b6b29e4a9cd9225afba4142d5f522baAffected
42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to before f6fe7261b92b21109678747f36df9fdab1e30c34Affected
42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to before 6b9ecf4e1032e645873933e5b43cbb84cac19106Affected
42e9a92fe6a9095bd68a379aaec7ad2be0337f7a to before 4df105f0ce9f6f30cda4e99f577150d23f0c9c5fAffected

LinuxLinux

2.6.29Affected
before 2.6.29Not affected
4.14.331 through 4.14.*Not affected
4.19.300 through 4.19.*Not affected
5.4.262 through 5.4.*Not affected
5.10.202 through 5.10.*Not affected
5.15.140 through 5.15.*Not affected
6.1.64 through 6.1.*Not affected
6.5.13 through 6.5.*Not affected
6.6.3 through 6.6.*Not affected
6.7 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.