CVE-2023-54289

scsi: qedf: Fix NULL dereference in error handling

State: Published
Severity: Not scored
Published: Dec 30, 2025
Updated: May 11, 2026
Reserved: Dec 30, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: qedf: Fix NULL dereference in error handling

Smatch reported:

drivers/scsi/qedf/qedf_main.c:3056 qedf_alloc_global_queues() warn: missing unwind goto?

At this point in the function, nothing has been allocated so we can return directly. In particular the "qedf->global_queues" have not been allocated so calling qedf_free_global_queues() will lead to a NULL dereference when we check if (!gl[i]) and "gl" is NULL.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	61d8658b4a435eac729966cc94cdda077a8df5cd to before 961c8370c5f7e80a267680476e1bcff34bffe71aAffected 61d8658b4a435eac729966cc94cdda077a8df5cd to before ac64019e4d4b08c23edb117e0b2590985e33de1dAffected 61d8658b4a435eac729966cc94cdda077a8df5cd to before b1de5105d29b145b727b797e2d5de071ab3a7ca1Affected 61d8658b4a435eac729966cc94cdda077a8df5cd to before c316bde418af4c2a9df51149ed01d1bd8ca5bebfAffected 61d8658b4a435eac729966cc94cdda077a8df5cd to before 08c001c1e9444a3046c79a99aa93ac48073b18ccAffected 61d8658b4a435eac729966cc94cdda077a8df5cd to before 271c9b2eb60149afbeab28cb39e52f73bde9900cAffected 61d8658b4a435eac729966cc94cdda077a8df5cd to before f025312b089474a54e4859f3453771314d9e3d4fAffected
LinuxLinux	4.11Affected before 4.11Not affected 5.4.251 through 5.4.Not affected 5.10.188 through 5.10.Not affected 5.15.121 through 5.15.Not affected 6.1.39 through 6.1.Not affected 6.3.13 through 6.3.Not affected 6.4.4 through 6.4.Not affected 6.5 and laterNot affected

Product

Versions

LinuxLinux

61d8658b4a435eac729966cc94cdda077a8df5cd to before 961c8370c5f7e80a267680476e1bcff34bffe71aAffected
61d8658b4a435eac729966cc94cdda077a8df5cd to before ac64019e4d4b08c23edb117e0b2590985e33de1dAffected
61d8658b4a435eac729966cc94cdda077a8df5cd to before b1de5105d29b145b727b797e2d5de071ab3a7ca1Affected
61d8658b4a435eac729966cc94cdda077a8df5cd to before c316bde418af4c2a9df51149ed01d1bd8ca5bebfAffected
61d8658b4a435eac729966cc94cdda077a8df5cd to before 08c001c1e9444a3046c79a99aa93ac48073b18ccAffected
61d8658b4a435eac729966cc94cdda077a8df5cd to before 271c9b2eb60149afbeab28cb39e52f73bde9900cAffected
61d8658b4a435eac729966cc94cdda077a8df5cd to before f025312b089474a54e4859f3453771314d9e3d4fAffected

LinuxLinux

4.11Affected
before 4.11Not affected
5.4.251 through 5.4.*Not affected
5.10.188 through 5.10.*Not affected
5.15.121 through 5.15.*Not affected
6.1.39 through 6.1.*Not affected
6.3.13 through 6.3.*Not affected
6.4.4 through 6.4.*Not affected
6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.