CVE-2023-53603

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the qla2xxx SCSI driver where a NULL pointer dereference may occur. Specifically, the issue arises when the sa ctl variable is NULL, and the fcport pointer is allocated after the exit call, leading to a dereference of a NULL fcport pointer during routine exit. The issue was identified by Klocwork.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.