In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Pointer may be dereferenced
Klocwork tool reported pointer 'rport' returned from call to function fcbsgto_rport() may be NULL and will be dereferenced.
Add a fix to validate rport before dereferencing.
[
{
"id": "CVE-2023-53150-01e664c3",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 1642.0,
"function_hash": "169816880568640257001086460669076912868"
},
"target": {
"function": "qla24xx_bsg_request",
"file": "drivers/scsi/qla2xxx/qla_bsg.c"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@00eca15319d9ce8c31cdf22f32a3467775423df4"
},
{
"id": "CVE-2023-53150-0327ef50",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 1642.0,
"function_hash": "169816880568640257001086460669076912868"
},
"target": {
"function": "qla24xx_bsg_request",
"file": "drivers/scsi/qla2xxx/qla_bsg.c"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0715da51391d223bf4981e28346770edea7eeb74"
},
{
"id": "CVE-2023-53150-196f4edd",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"241347794488289772952231814811800680191",
"101921822154789277154788339997027827251",
"138561468940336863672455221262828701733",
"182119492382466080255632214381101641693"
],
"threshold": 0.9
},
"target": {
"file": "drivers/scsi/qla2xxx/qla_bsg.c"
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0715da51391d223bf4981e28346770edea7eeb74"
},
{
"id": "CVE-2023-53150-475dffda",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 1642.0,
"function_hash": "169816880568640257001086460669076912868"
},
"target": {
"function": "qla24xx_bsg_request",
"file": "drivers/scsi/qla2xxx/qla_bsg.c"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b06d1b525364bbcf4929b4b35d81945b10dc9883"
},
{
"id": "CVE-2023-53150-76050405",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"241347794488289772952231814811800680191",
"101921822154789277154788339997027827251",
"138561468940336863672455221262828701733",
"182119492382466080255632214381101641693"
],
"threshold": 0.9
},
"target": {
"file": "drivers/scsi/qla2xxx/qla_bsg.c"
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a69125a3ce88d9a386872034e7664b30cc4bcbed"
},
{
"id": "CVE-2023-53150-86d3124e",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 1047.0,
"function_hash": "210805189365833225607724593011376670777"
},
"target": {
"function": "qla24xx_bsg_request",
"file": "drivers/scsi/qla2xxx/qla_bsg.c"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3f22f9ddbb29dba369daddb084be3bacf1587529"
},
{
"id": "CVE-2023-53150-881a24c4",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"241347794488289772952231814811800680191",
"101921822154789277154788339997027827251",
"138561468940336863672455221262828701733",
"182119492382466080255632214381101641693"
],
"threshold": 0.9
},
"target": {
"file": "drivers/scsi/qla2xxx/qla_bsg.c"
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@22b1d7c8bb59c3376430a8bad5840194b12bf29a"
},
{
"id": "CVE-2023-53150-8cfbcb30",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"241347794488289772952231814811800680191",
"101921822154789277154788339997027827251",
"138561468940336863672455221262828701733",
"182119492382466080255632214381101641693"
],
"threshold": 0.9
},
"target": {
"file": "drivers/scsi/qla2xxx/qla_bsg.c"
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@005961bd8f066fe931104f67c34ebfcc7f240099"
},
{
"id": "CVE-2023-53150-9922f7d0",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"241347794488289772952231814811800680191",
"101921822154789277154788339997027827251",
"138561468940336863672455221262828701733",
"182119492382466080255632214381101641693"
],
"threshold": 0.9
},
"target": {
"file": "drivers/scsi/qla2xxx/qla_bsg.c"
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b06d1b525364bbcf4929b4b35d81945b10dc9883"
},
{
"id": "CVE-2023-53150-9f6d8747",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"241347794488289772952231814811800680191",
"101921822154789277154788339997027827251",
"138561468940336863672455221262828701733",
"182119492382466080255632214381101641693"
],
"threshold": 0.9
},
"target": {
"file": "drivers/scsi/qla2xxx/qla_bsg.c"
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3f22f9ddbb29dba369daddb084be3bacf1587529"
},
{
"id": "CVE-2023-53150-a62704ac",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 1047.0,
"function_hash": "210805189365833225607724593011376670777"
},
"target": {
"function": "qla24xx_bsg_request",
"file": "drivers/scsi/qla2xxx/qla_bsg.c"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a69125a3ce88d9a386872034e7664b30cc4bcbed"
},
{
"id": "CVE-2023-53150-bb0af61b",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 1047.0,
"function_hash": "210805189365833225607724593011376670777"
},
"target": {
"function": "qla24xx_bsg_request",
"file": "drivers/scsi/qla2xxx/qla_bsg.c"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@005961bd8f066fe931104f67c34ebfcc7f240099"
},
{
"id": "CVE-2023-53150-c521bc5c",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"241347794488289772952231814811800680191",
"101921822154789277154788339997027827251",
"138561468940336863672455221262828701733",
"182119492382466080255632214381101641693"
],
"threshold": 0.9
},
"target": {
"file": "drivers/scsi/qla2xxx/qla_bsg.c"
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5addd62586a94a572359418464ce0ae12fa46187"
},
{
"id": "CVE-2023-53150-c65e7d97",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 1642.0,
"function_hash": "169816880568640257001086460669076912868"
},
"target": {
"function": "qla24xx_bsg_request",
"file": "drivers/scsi/qla2xxx/qla_bsg.c"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@22b1d7c8bb59c3376430a8bad5840194b12bf29a"
},
{
"id": "CVE-2023-53150-c86e6df7",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 1047.0,
"function_hash": "210805189365833225607724593011376670777"
},
"target": {
"function": "qla24xx_bsg_request",
"file": "drivers/scsi/qla2xxx/qla_bsg.c"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5addd62586a94a572359418464ce0ae12fa46187"
},
{
"id": "CVE-2023-53150-d341b06d",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"241347794488289772952231814811800680191",
"101921822154789277154788339997027827251",
"138561468940336863672455221262828701733",
"182119492382466080255632214381101641693"
],
"threshold": 0.9
},
"target": {
"file": "drivers/scsi/qla2xxx/qla_bsg.c"
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@00eca15319d9ce8c31cdf22f32a3467775423df4"
}
]