Riskcovery

CVE-2023-53038

scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read()

State
Published
Severity
Not scored
Published
May 2, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read()

If kzalloc() fails in lpfc_sli4_cgn_params_read(), then we rely on lpfc_read_object()'s routine to NULL check pdata.

Currently, an early return error is thrown from lpfc_read_object() to protect us from NULL ptr dereference, but the errno code is -ENODEV.

Change the errno code to a more appropriate -ENOMEM.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 72df8a452883b0be334396acba07df77c3c3f6c7 to before 67b8343998b84418bc5b5206aa01fe9b461a80efAffected
  • 72df8a452883b0be334396acba07df77c3c3f6c7 to before 4829a1e1171536978b240a1438789c2e4d5c9715Affected
  • 72df8a452883b0be334396acba07df77c3c3f6c7 to before 908dd9a0853a88155a5a36018c7e2b32ccf20379Affected
  • 72df8a452883b0be334396acba07df77c3c3f6c7 to before 312320b0e0ec21249a17645683fe5304d796aec1Affected
LinuxLinux
  • 5.15Affected
  • before 5.15Not affected
  • 5.15.105 through 5.15.*Not affected
  • 6.1.22 through 6.1.*Not affected
  • 6.2.9 through 6.2.*Not affected
  • 6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.