CVE-2023-53280

scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue

State: Published
Severity: 5.5 Medium
Published: Sep 16, 2025
Updated: May 11, 2026
Reserved: Sep 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue

System crash when qla2x00_start_sp(sp) returns error code EGAIN and wake_up gets called for uninitialized wait queue sp->nvme_ls_waitq.

qla2xxx [0000:37:00.1]-2121:5: Returning existing qpair of ffff8ae2c0513400 for idx=0 qla2xxx [0000:37:00.1]-700e:5: qla2x00_start_sp failed = 11 BUG: unable to handle kernel NULL pointer dereference at 0000000000000000 PGD 0 P4D 0 Oops: 0000 [#1] SMP NOPTI Hardware name: HPE ProLiant DL360 Gen10/ProLiant DL360 Gen10, BIOS U32 09/03/2021 Workqueue: nvme-wq nvme_fc_connect_ctrl_work [nvme_fc] RIP: 0010:__wake_up_common+0x4c/0x190 RSP: 0018:ffff95f3e0cb7cd0 EFLAGS: 00010086 RAX: 0000000000000000 RBX: ffff8b08d3b26328 RCX: 0000000000000000 RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffff8b08d3b26320 RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffe8 R10: 0000000000000000 R11: ffff95f3e0cb7a60 R12: ffff95f3e0cb7d20 R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8b2fdf6c0000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 0000002f1e410002 CR4: 00000000007706e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 PKRU: 55555554 Call Trace: __wake_up_common_lock+0x7c/0xc0 qla_nvme_ls_req+0x355/0x4c0 [qla2xxx] ? __nvme_fc_send_ls_req+0x260/0x380 [nvme_fc] ? nvme_fc_send_ls_req.constprop.42+0x1a/0x45 [nvme_fc] ? nvme_fc_connect_ctrl_work.cold.63+0x1e3/0xa7d [nvme_fc]

Remove unused nvme_ls_waitq wait queue. nvme_ls_waitq logic was removed previously in the commits tagged Fixed: below.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	5621b0dd74532c09965264c14958de3f85b498a6 to before b7084ebf4f54d46fed5153112d685f4137334175Affected 5621b0dd74532c09965264c14958de3f85b498a6 to before 0b1ce92fabdb7d02ddf8641230a06e2752ae5baaAffected 5621b0dd74532c09965264c14958de3f85b498a6 to before 522ee1b3030f3b6b5fd59489d12b4ca767c9e5daAffected 5621b0dd74532c09965264c14958de3f85b498a6 to before f459d586fdf12c53116c9fddf43065165fdd5969Affected 5621b0dd74532c09965264c14958de3f85b498a6 to before 92529387a0066754fd9cda080fb3298b8cca750cAffected 5621b0dd74532c09965264c14958de3f85b498a6 to before 20fce500b232b970e40312a9c97e7f3b6d7a709cAffected
LinuxLinux	4.14Affected before 4.14Not affected 5.4.251 through 5.4.Not affected 5.10.188 through 5.10.Not affected 5.15.121 through 5.15.Not affected 6.1.40 through 6.1.Not affected 6.4.5 through 6.4.*Not affected 6.5 and laterNot affected

Product

Versions

LinuxLinux

5621b0dd74532c09965264c14958de3f85b498a6 to before b7084ebf4f54d46fed5153112d685f4137334175Affected
5621b0dd74532c09965264c14958de3f85b498a6 to before 0b1ce92fabdb7d02ddf8641230a06e2752ae5baaAffected
5621b0dd74532c09965264c14958de3f85b498a6 to before 522ee1b3030f3b6b5fd59489d12b4ca767c9e5daAffected
5621b0dd74532c09965264c14958de3f85b498a6 to before f459d586fdf12c53116c9fddf43065165fdd5969Affected
5621b0dd74532c09965264c14958de3f85b498a6 to before 92529387a0066754fd9cda080fb3298b8cca750cAffected
5621b0dd74532c09965264c14958de3f85b498a6 to before 20fce500b232b970e40312a9c97e7f3b6d7a709cAffected

LinuxLinux

4.14Affected
before 4.14Not affected
5.4.251 through 5.4.*Not affected
5.10.188 through 5.10.*Not affected
5.15.121 through 5.15.*Not affected
6.1.40 through 6.1.*Not affected
6.4.5 through 6.4.*Not affected
6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.