In the Linux kernel, the following vulnerability has been resolved: nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid() The nvme_fc_fcp_op structure describing an AEN operation is initialized with a null request structure pointer. An FC LLDD may make a call to nvme_fc_io_getuuid passing a pointer to an nvmefc_fcp_req for an AEN operation. Add validation of the request structure pointer before dereference.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | linux | < 6.1.64-1 | linux_6.1.64-1_all.deb |
Debian | 11 | all | linux | <= 5.10.218-1 | linux_5.10.218-1_all.deb |
Debian | 999 | all | linux | < 6.5.6-1 | linux_6.5.6-1_all.deb |
Debian | 13 | all | linux | < 6.5.6-1 | linux_6.5.6-1_all.deb |