CVE-2023-53754

scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()

State: Published
Severity: Not scored
Published: Dec 8, 2025
Updated: May 11, 2026
Reserved: Dec 8, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()

When if_type equals zero and pci_resource_start(pdev, PCI_64BIT_BAR4) returns false, drbl_regs_memmap_p is not remapped. This passes a NULL pointer to iounmap(), which can trigger a WARN() on certain arches.

When if_type equals six and pci_resource_start(pdev, PCI_64BIT_BAR4) returns true, drbl_regs_memmap_p may has been remapped and ctrl_regs_memmap_p is not remapped. This is a resource leak and passes a NULL pointer to iounmap().

To fix these issues, we need to add null checks before iounmap(), and change some goto labels.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1351e69fc6db30e186295f1c9495d03cef6a01a2 to before 74d90f92eafe8ccd12827228236a28a94eda6bccAffected 1351e69fc6db30e186295f1c9495d03cef6a01a2 to before bab8dc38b1a0a12bc064fc064269033bdcf5b88eAffected 1351e69fc6db30e186295f1c9495d03cef6a01a2 to before fd8c83d8375b9dac1949f2753485a5c055ebfad0Affected 1351e69fc6db30e186295f1c9495d03cef6a01a2 to before e6f1ef4a53856ed000b0f7265d7e16dcb00f4243Affected 1351e69fc6db30e186295f1c9495d03cef6a01a2 to before 631d0fab143bef85ea0813596f1dda36e2b9724cAffected 1351e69fc6db30e186295f1c9495d03cef6a01a2 to before 7e5a54d1f00725a739dcd20f616d82eff4f764bdAffected 1351e69fc6db30e186295f1c9495d03cef6a01a2 to before 91a0c0c1413239d0548b5aac4c82f38f6d53a91eAffected
LinuxLinux	4.17Affected before 4.17Not affected 5.4.243 through 5.4.Not affected 5.10.180 through 5.10.Not affected 5.15.111 through 5.15.Not affected 6.1.28 through 6.1.Not affected 6.2.15 through 6.2.Not affected 6.3.2 through 6.3.Not affected 6.4 and laterNot affected

Product

Versions

LinuxLinux

1351e69fc6db30e186295f1c9495d03cef6a01a2 to before 74d90f92eafe8ccd12827228236a28a94eda6bccAffected
1351e69fc6db30e186295f1c9495d03cef6a01a2 to before bab8dc38b1a0a12bc064fc064269033bdcf5b88eAffected
1351e69fc6db30e186295f1c9495d03cef6a01a2 to before fd8c83d8375b9dac1949f2753485a5c055ebfad0Affected
1351e69fc6db30e186295f1c9495d03cef6a01a2 to before e6f1ef4a53856ed000b0f7265d7e16dcb00f4243Affected
1351e69fc6db30e186295f1c9495d03cef6a01a2 to before 631d0fab143bef85ea0813596f1dda36e2b9724cAffected
1351e69fc6db30e186295f1c9495d03cef6a01a2 to before 7e5a54d1f00725a739dcd20f616d82eff4f764bdAffected
1351e69fc6db30e186295f1c9495d03cef6a01a2 to before 91a0c0c1413239d0548b5aac4c82f38f6d53a91eAffected

LinuxLinux

4.17Affected
before 4.17Not affected
5.4.243 through 5.4.*Not affected
5.10.180 through 5.10.*Not affected
5.15.111 through 5.15.*Not affected
6.1.28 through 6.1.*Not affected
6.2.15 through 6.2.*Not affected
6.3.2 through 6.3.*Not affected
6.4 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.