Riskcovery

CVE-2024-43821

scsi: lpfc: Fix a possible null pointer dereference

State
Published
Severity
Not scored
Published
Aug 17, 2024
Updated
May 11, 2026
Reserved
Aug 17, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: lpfc: Fix a possible null pointer dereference

In function lpfc_xcvr_data_show, the memory allocation with kmalloc might fail, thereby making rdp_context a null pointer. In the following context and functions that use this pointer, there are dereferencing operations, leading to null pointer dereference.

To fix this issue, a null pointer check should be added. If it is null, use scnprintf to notify the user and return len.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 479b0917e4477f49df2e3be454aac3cfa5dec171 to before 57600a7dd2b52c904f7c8d2cac0fd8c23868e680Affected
  • 479b0917e4477f49df2e3be454aac3cfa5dec171 to before 45b2a23e00d448a9e6d1f371ca3a4d4b073fe78cAffected
  • 479b0917e4477f49df2e3be454aac3cfa5dec171 to before 5e0bf3e8aec2cbc51123f84b29aaacbd91fc56faAffected
LinuxLinux
  • 6.2Affected
  • before 6.2Not affected
  • 6.6.44 through 6.6.*Not affected
  • 6.10.3 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.