CVE-2023-54014

scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport()

N/A

Published: December 24, 2025 at 10:55 AM UTC

Updated: June 17, 2026 at 06:46 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() Klocwork reported warning of rport maybe NULL and will be dereferenced. rport returned by call to fc_bsg_to_rport() could be NULL and dereferenced. Check valid rport returned by fc_bsg_to_rport().

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

4.10 ≤ v < 4.14.3224.10 ≤ v < 4.19.2914.10 ≤ v < 5.10.1884.10 ≤ v < 5.15.1214.10 ≤ v < 5.4.2514.10 ≤ v < 6.1.404.10 ≤ v < 6.4.54.10 ≤ v < 6.54.1075cc8cfc6e13d42d50c2bf4307d0a68c2a70f709

Vendor states this is fixed in 1b7e5bdf2be22ae8c61bdca5a5f96ec2746e9639 (fixed)

Vendor states this is fixed in 1ccd52b790a66b8b5f75c87eab8c3a37f941a2bf (fixed)

Vendor states this is fixed in 921d6844625527a92d1178262a633cc88a8e61bd (fixed)

Vendor states this is fixed in af73f23a27206ffb3c477cac75b5fcf03410556e (fixed)

Vendor states this is fixed in ccd3bc595bda67db5a347b9050c2df28f292d3fb (fixed)

Vendor states this is fixed in ced5460eae772e847debbc0b65ef93aedab92d3f (fixed)

Vendor states this is fixed in e466930717ef18c112585a39fc6174d8eb441df5 (fixed)

Vendor states this is fixed in f35bd94b4e11c41de90cd0fa72c9062e8196822f (fixed)

Vendor states this is fixed in 4.10 (unaffected)

Vendor states this is fixed in 4.14.322 (unaffected)

Vendor states this is fixed in 4.19.291 (unaffected)

Vendor states this is fixed in 5.10.188 (unaffected)