CVE-2023-54014

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the scsi subsystem, specifically in the qla2xxx driver. A check for a valid return value from the fc bsg to rport() function was missing, potentially leading to a null pointer dereference if the function returned a NULL value for the rport. This issue was identified by Klocwork, a static code analysis tool.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.