CVE-2023-54014

Linux Kernel - Null Pointer Dereference in SCSI qla2xxx Driver via fc_bsg_to_rport()

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() Klocwork reported warning of rport maybe NULL and will be dereferenced. rport returned by call to fc_bsg_to_rport() could be NULL and dereferenced. Check valid rport returned by fc_bsg_to_rport().

References (8)

Core 8

Scores

EPSS 0.0018
EPSS Percentile 8.3%

Details

Status published
Products (25)
linux/Kernel 4.10.0 - 4.14.322linux
linux/Kernel 4.15.0 - 4.19.291linux
linux/Kernel 4.20.0 - 5.4.251linux
linux/Kernel 5.11.0 - 5.15.121linux
linux/Kernel 5.16.0 - 6.1.40linux
linux/Kernel 5.5.0 - 5.10.188linux
linux/Kernel 6.2.0 - 6.4.5linux
Linux/Linux < 4.10
Linux/Linux 4.10
Linux/Linux 4.14.322 - 4.14.*
... and 15 more
Published Dec 24, 2025
Tracked Since Feb 18, 2026