CVE-2023-54014scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() Klocwork reported warning of rport maybe NULL and will be dereferenced. rport returned by call to fc_bsg_to_rport() could be NULL and dereferenced. Check valid rport returned by fc_bsg_to_rport().
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Deferred
- Record last updated
- May 11, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 75cc8cfc6e13d42d50c2bf4307d0a68c2a70f709 before f35bd94b4e11c41de90cd0fa72c9062e8196822f; from 75cc8cfc6e13d42d50c2bf4307d0a68c2a70f709 before ccd3bc595bda67db5a347b9050c2df28f292d3fb; 75cc8cfc6e13d42d50c2bf4307d0a68c2a70f709 builds before 1b7e5bdf2be22ae8c61bdca5a5f96ec2746e9639; from 75cc8cfc6e13d42d50c2bf4307d0a68c2a70f709 before 921d6844625527a92d1178262a633cc88a8e61bd; 75cc8cfc6e13d42d50c2bf4307d0a68c2a70f709 builds before 1ccd52b790a66b8b5f75c87eab8c3a37f941a2bf; from 75cc8cfc6e13d42d50c2bf4307d0a68c2a70f709 before e466930717ef18c112585a39fc6174d8eb441df5; from 75cc8cfc6e13d42d50c2bf4307d0a68c2a70f709 before ced5460eae772e847debbc0b65ef93aedab92d3f; from 75cc8cfc6e13d42d50c2bf4307d0a68c2a70f709 before af73f23a27206ffb3c477cac75b5fcf03410556e | CNA record |
References
- https://git.kernel.org/stable/c/f35bd94b4e11c41de90cd0fa72c9062e8196822f
- https://git.kernel.org/stable/c/ccd3bc595bda67db5a347b9050c2df28f292d3fb
- https://git.kernel.org/stable/c/1b7e5bdf2be22ae8c61bdca5a5f96ec2746e9639
- https://git.kernel.org/stable/c/921d6844625527a92d1178262a633cc88a8e61bd
- https://git.kernel.org/stable/c/1ccd52b790a66b8b5f75c87eab8c3a37f941a2bf
- https://git.kernel.org/stable/c/e466930717ef18c112585a39fc6174d8eb441df5
- https://git.kernel.org/stable/c/ced5460eae772e847debbc0b65ef93aedab92d3f
- https://git.kernel.org/stable/c/af73f23a27206ffb3c477cac75b5fcf03410556e
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.