Orta CVSS 5.5
CVE-2023-53124: Linux Kernel: NULL işaretçi başvurusu
Açıklama (NVD)
In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() Port is allocated by sas_port_alloc_num() and rphy is allocated by either sas_end_device_alloc() or sas_expander_alloc(), all of which may return NULL. So we need to check the rphy to avoid possible NULL pointer access. If sas_rphy_add() returned with failure, rphy is set to NULL. We would access the rphy in the following lines which would also result NULL pointer access.
Özet bilgiler
- Ürün
- Linux Linux Kernel
- CVSS v3.1
- 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - EPSS
- %0,19 (yüzdelik 9)
- CWE
- CWE-476
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| linux-linux-kernel | 5.4.229 | — | 5.4.238 |
| linux-linux-kernel | 5.10.163 | — | 5.10.176 |
| linux-linux-kernel | 5.15.86 | — | 5.15.104 |
| linux-linux-kernel | 6.0.16 | — | 6.1 |
| linux-linux-kernel | 6.1.2 | — | 6.1.21 |
| linux-linux-kernel | 6.2 | — | 6.2.8 |
| linux-linux-kernel | 6.3 | 6.3 | — |
| linux-linux-kernel | 6.3 | 6.3 | — |