PT-2025-18802
CVE-2023-53038
·
Published
2023-02-27
·
Updated
2026-10-21
Description by
CVSS 2.0
5.5
MediumMetricsAV:A/AC:L/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A vulnerability in the Linux kernel has been resolved. The issue is related to the
lpfc sli4 cgn params read() function, where a failed kzalloc() call could lead to a NULL pointer dereference. The lpfc read object() function returns an error to prevent this, but the error code has been changed from -ENODEV to a more appropriate -ENOMEM.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾