In the Linux kernel, the following vulnerability has been resolved:
nvme-fc: Prevent null pointer dereference in nvmefcio_getuuid()
The nvmefcfcpop structure describing an AEN operation is initialized with a null request structure pointer. An FC LLDD may make a call to nvmefciogetuuid passing a pointer to an nvmefcfcpreq for an AEN operation.
Add validation of the request structure pointer before dereference.