CVE-2024-43821

scsi: lpfc: Fix a possible null pointer dereference

published August 17, 2024

CVSS
—
EPSS
0%
Percentile
12.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

scsi: lpfc: Fix a possible null pointer dereference

In function lpfc_xcvr_data_show, the memory allocation with kmalloc might

fail, thereby making rdp_context a null pointer. In the following context

and functions that use this pointer, there are dereferencing operations,

leading to null pointer dereference.

To fix this issue, a null pointer check should be added. If it is null,

use scnprintf to notify the user and return len.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00225 · 12.4th percentile
Published
2024-08-17T09:21Z
EPSS history
Timeline
  • 17 AUG 09:21Z
    scsi: lpfc: Fix a possible null pointer dereference
    cvelistv5