Back
CVE-2023-54014
scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport()
Not scoredEPSS 0.21%
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() Klocwork reported warning of rport maybe NULL and will be dereferenced. rport returned by call to fc_bsg_to_rport() could be NULL and dereferenced. Check valid rport returned by fc_bsg_to_rport().
Scores
No CVSS score yet: neither the CNA, CISA nor NVD has scored this CVE. NVD status: Deferred.
- EPSS (exploitation in 30 days)
- 0.21% · top 89% of all CVEs (6 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Not scored.
Affected products
- affected 75cc8cfc6e13d42d50c2bf4307d0a68c2a70f709 – < f35bd94b4e11c41de90cd0fa72c9062e8196822f
- affected 75cc8cfc6e13d42d50c2bf4307d0a68c2a70f709 – < ccd3bc595bda67db5a347b9050c2df28f292d3fb
- affected 75cc8cfc6e13d42d50c2bf4307d0a68c2a70f709 – < 1b7e5bdf2be22ae8c61bdca5a5f96ec2746e9639
- affected 75cc8cfc6e13d42d50c2bf4307d0a68c2a70f709 – < 921d6844625527a92d1178262a633cc88a8e61bd
- affected 75cc8cfc6e13d42d50c2bf4307d0a68c2a70f709 – < 1ccd52b790a66b8b5f75c87eab8c3a37f941a2bf
- affected 75cc8cfc6e13d42d50c2bf4307d0a68c2a70f709 – < e466930717ef18c112585a39fc6174d8eb441df5
- affected 75cc8cfc6e13d42d50c2bf4307d0a68c2a70f709 – < ced5460eae772e847debbc0b65ef93aedab92d3f
- affected 75cc8cfc6e13d42d50c2bf4307d0a68c2a70f709 – < af73f23a27206ffb3c477cac75b5fcf03410556e
- affected 4.10
- unaffected < 4.10
- unaffected 4.14.322 – ≤ 4.14.*
- unaffected 4.19.291 – ≤ 4.19.*
- unaffected 5.4.251 – ≤ 5.4.*
- unaffected 5.10.188 – ≤ 5.10.*
- unaffected 5.15.121 – ≤ 5.15.*
- unaffected 6.1.40 – ≤ 6.1.*
- unaffected 6.4.5 – ≤ 6.4.*
- unaffected 6.5 – ≤ *
References (8)
- https://git.kernel.org/stable/c/f35bd94b4e11c41de90cd0fa72c9062e8196822f (opens in a new tab)
- https://git.kernel.org/stable/c/ccd3bc595bda67db5a347b9050c2df28f292d3fb (opens in a new tab)
- https://git.kernel.org/stable/c/1b7e5bdf2be22ae8c61bdca5a5f96ec2746e9639 (opens in a new tab)
- https://git.kernel.org/stable/c/921d6844625527a92d1178262a633cc88a8e61bd (opens in a new tab)
- https://git.kernel.org/stable/c/1ccd52b790a66b8b5f75c87eab8c3a37f941a2bf (opens in a new tab)
- https://git.kernel.org/stable/c/e466930717ef18c112585a39fc6174d8eb441df5 (opens in a new tab)
- https://git.kernel.org/stable/c/ced5460eae772e847debbc0b65ef93aedab92d3f (opens in a new tab)
- https://git.kernel.org/stable/c/af73f23a27206ffb3c477cac75b5fcf03410556e (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2023-54014)Record last updated .