Back
CVE-2023-53124
scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
Medium5.5EPSS 0.19%
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() Port is allocated by sas_port_alloc_num() and rphy is allocated by either sas_end_device_alloc() or sas_expander_alloc(), all of which may return NULL. So we need to check the rphy to avoid possible NULL pointer access. If sas_rphy_add() returned with failure, rphy is set to NULL. We would access the rphy in the following lines which would also result NULL pointer access.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Analyzed | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.19% · top 91% of all CVEs (5 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.
Weakness
Affected products
- affected d60000cb1195a464080b0efb4949daf7594e0020 – < 090305c36185c0547e4441d4c08f1cf096b32134
- affected ce1a69cc85006b494353911b35171da195d79e25 – < 6f0c2f70d9929208d8427ec72c3ed91e2251e289
- affected 6a92129c8f999ff5b122c100ce7f625eb3e98c4b – < 9937f784a608944107dcc2ba9a9c3333f8330b9e
- affected d17bca3ddfe507874cb826d32721552da12e741f – < b5e5bbb3fa5f8412e96c5eda7f4a4af6241d6bd3
- affected 78316e9dfc24906dd474630928ed1d3c562b568e – < a26c775ccc4cfe46f9b718b51bd24313053c7e0b
- affected 78316e9dfc24906dd474630928ed1d3c562b568e – < d3c57724f1569311e4b81e98fad0931028b9bdcd
- affected 6f6768e2fc8638fabdd8802c2ef693d7aef01db1
- affected 5.4.229 – < 5.4.238
- affected 5.10.163 – < 5.10.176
- affected 5.15.86 – < 5.15.104
- affected 6.1.2 – < 6.1.21
- affected 6.0.16 – < 6.1
- affected 6.2
- unaffected < 6.2
- unaffected 5.4.238 – ≤ 5.4.*
- unaffected 5.10.176 – ≤ 5.10.*
- unaffected 5.15.104 – ≤ 5.15.*
- unaffected 6.1.21 – ≤ 6.1.*
- unaffected 6.2.8 – ≤ 6.2.*
- unaffected 6.3 – ≤ *
References (6)
- https://git.kernel.org/stable/c/090305c36185c0547e4441d4c08f1cf096b32134 (opens in a new tab)
- https://git.kernel.org/stable/c/6f0c2f70d9929208d8427ec72c3ed91e2251e289 (opens in a new tab)
- https://git.kernel.org/stable/c/9937f784a608944107dcc2ba9a9c3333f8330b9e (opens in a new tab)
- https://git.kernel.org/stable/c/b5e5bbb3fa5f8412e96c5eda7f4a4af6241d6bd3 (opens in a new tab)
- https://git.kernel.org/stable/c/a26c775ccc4cfe46f9b718b51bd24313053c7e0b (opens in a new tab)
- https://git.kernel.org/stable/c/d3c57724f1569311e4b81e98fad0931028b9bdcd (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2023-53124)Record last updated .