Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-43821
HistoryAug 17, 2024 - 9:21 a.m.

CVE-2024-43821 scsi: lpfc: Fix a possible null pointer dereference

2024-08-1709:21:42
Linux
github.com
1
linux kernel
scsi
lpfc
null pointer
vulnerability
memory allocation
kmalloc

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

scsi: lpfc: Fix a possible null pointer dereference

In function lpfc_xcvr_data_show, the memory allocation with kmalloc might
fail, thereby making rdp_context a null pointer. In the following context
and functions that use this pointer, there are dereferencing operations,
leading to null pointer dereference.

To fix this issue, a null pointer check should be added. If it is null,
use scnprintf to notify the user and return len.

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2024-43821