Back
CVE-2023-52809
scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
Medium5.5EPSS 0.25%
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() fc_lport_ptp_setup() did not check the return value of fc_rport_create() which can return NULL and would cause a NULL pointer dereference. Address this issue by checking return value of fc_rport_create() and log error message on fc_rport_create() failed.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.25% · top 84% of all CVEs (6 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.
Weakness
Affected products
- affected 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a – < 930f0aaba4820d6362de4e6ed569eaf444f1ea4e
- affected 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a – < 77072ec41d6ab3718c3fc639bc149b8037caedfa
- affected 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a – < b549acf999824d4f751ca57965700372f2f3ad00
- affected 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a – < bb83f79f90e92f46466adcfd4fd264a7ae0f0f01
- affected 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a – < 56d78b5495ebecbb9395101f3be177cd0a52450b
- affected 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a – < 442fd24d7b6b29e4a9cd9225afba4142d5f522ba
- affected 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a – < f6fe7261b92b21109678747f36df9fdab1e30c34
- affected 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a – < 6b9ecf4e1032e645873933e5b43cbb84cac19106
- affected 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a – < 4df105f0ce9f6f30cda4e99f577150d23f0c9c5f
- affected 2.6.29
- unaffected < 2.6.29
- unaffected 4.14.331 – ≤ 4.14.*
- unaffected 4.19.300 – ≤ 4.19.*
- unaffected 5.4.262 – ≤ 5.4.*
- unaffected 5.10.202 – ≤ 5.10.*
- unaffected 5.15.140 – ≤ 5.15.*
- unaffected 6.1.64 – ≤ 6.1.*
- unaffected 6.5.13 – ≤ 6.5.*
- unaffected 6.6.3 – ≤ 6.6.*
- unaffected 6.7 – ≤ *
References (9)
- https://git.kernel.org/stable/c/930f0aaba4820d6362de4e6ed569eaf444f1ea4e (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/77072ec41d6ab3718c3fc639bc149b8037caedfa (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/b549acf999824d4f751ca57965700372f2f3ad00 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/bb83f79f90e92f46466adcfd4fd264a7ae0f0f01 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/56d78b5495ebecbb9395101f3be177cd0a52450b (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/442fd24d7b6b29e4a9cd9225afba4142d5f522ba (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/f6fe7261b92b21109678747f36df9fdab1e30c34 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/6b9ecf4e1032e645873933e5b43cbb84cac19106 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/4df105f0ce9f6f30cda4e99f577150d23f0c9c5f (opens in a new tab)x_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2023-52809)Record last updated .