Riskcovery

CVE-2023-54014

scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport()

State
Published
Severity
Not scored
Published
Dec 24, 2025
Updated
May 11, 2026
Reserved
Dec 24, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport()

Klocwork reported warning of rport maybe NULL and will be dereferenced. rport returned by call to fc_bsg_to_rport() could be NULL and dereferenced.

Check valid rport returned by fc_bsg_to_rport().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 75cc8cfc6e13d42d50c2bf4307d0a68c2a70f709 to before f35bd94b4e11c41de90cd0fa72c9062e8196822fAffected
  • 75cc8cfc6e13d42d50c2bf4307d0a68c2a70f709 to before ccd3bc595bda67db5a347b9050c2df28f292d3fbAffected
  • 75cc8cfc6e13d42d50c2bf4307d0a68c2a70f709 to before 1b7e5bdf2be22ae8c61bdca5a5f96ec2746e9639Affected
  • 75cc8cfc6e13d42d50c2bf4307d0a68c2a70f709 to before 921d6844625527a92d1178262a633cc88a8e61bdAffected
  • 75cc8cfc6e13d42d50c2bf4307d0a68c2a70f709 to before 1ccd52b790a66b8b5f75c87eab8c3a37f941a2bfAffected
  • 75cc8cfc6e13d42d50c2bf4307d0a68c2a70f709 to before e466930717ef18c112585a39fc6174d8eb441df5Affected
  • 75cc8cfc6e13d42d50c2bf4307d0a68c2a70f709 to before ced5460eae772e847debbc0b65ef93aedab92d3fAffected
  • 75cc8cfc6e13d42d50c2bf4307d0a68c2a70f709 to before af73f23a27206ffb3c477cac75b5fcf03410556eAffected
LinuxLinux
  • 4.10Affected
  • before 4.10Not affected
  • 4.14.322 through 4.14.*Not affected
  • 4.19.291 through 4.19.*Not affected
  • 5.4.251 through 5.4.*Not affected
  • 5.10.188 through 5.10.*Not affected
  • 5.15.121 through 5.15.*Not affected
  • 6.1.40 through 6.1.*Not affected
  • 6.4.5 through 6.4.*Not affected
  • 6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.