CVE-2023-53038

scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read()

MEDIUM

5.5

CVSS Score

Published: May 2, 2025 at 03:54 PM UTC

Updated: June 17, 2026 at 06:44 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read() If kzalloc() fails in lpfc_sli4_cgn_params_read(), then we rely on lpfc_read_object()'s routine to NULL check pdata. Currently, an early return error is thrown from lpfc_read_object() to protect us from NULL ptr dereference, but the errno code is -ENODEV. Change the errno code to a more appropriate -ENOMEM.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

v < 5.15.1055.15 ≤ v < 5.15.1055.15 ≤ v < 6.1.225.15 ≤ v < 6.2.95.15 ≤ v < 6.35.16 ≤ v < 6.1.226.2 ≤ v < 6.2.95.15 6.3 rc172df8a452883b0be334396acba07df77c3c3f6c7

Vendor states this is fixed in 312320b0e0ec21249a17645683fe5304d796aec1 (fixed)

Vendor states this is fixed in 4829a1e1171536978b240a1438789c2e4d5c9715 (fixed)

Vendor states this is fixed in 67b8343998b84418bc5b5206aa01fe9b461a80ef (fixed)

Vendor states this is fixed in 908dd9a0853a88155a5a36018c7e2b32ccf20379 (fixed)

Vendor states this is fixed in 5.15 (unaffected)

Vendor states this is fixed in 5.15.105 (unaffected)

Vendor states this is fixed in 6.1.22 (unaffected)

Vendor states this is fixed in 6.2.9 (unaffected)

Vendor states this is fixed in 6.3 (unaffected)