« Volver al listado

CVE-2023-54289

Estado: AplazadaSin puntuar—

In the Linux kernel, the following vulnerability has been resolved:

scsi: qedf: Fix NULL dereference in error handling

Smatch reported:

drivers/scsi/qedf/qedf_main.c:3056 qedf_alloc_global_queues() warn: missing unwind goto?

At this point in the function, nothing has been allocated so we can return directly. In particular the "qedf->global_queues" have not been allocated so calling qedf_free_global_queues() will lead to a NULL dereference when we check if (!gl[i]) and "gl" is NULL.

CVSS

NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Linux — Linux KernelAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-54289",
  "cveTags": [],
  "metrics": {},
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "61d8658b4a435eac729966cc94cdda077a8df5cd",
              "lessThan": "961c8370c5f7e80a267680476e1bcff34bffe71a",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "61d8658b4a435eac729966cc94cdda077a8df5cd",
              "lessThan": "ac64019e4d4b08c23edb117e0b2590985e33de1d",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "61d8658b4a435eac729966cc94cdda077a8df5cd",
              "lessThan": "b1de5105d29b145b727b797e2d5de071ab3a7ca1",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "61d8658b4a435eac729966cc94cdda077a8df5cd",
              "lessThan": "c316bde418af4c2a9df51149ed01d1bd8ca5bebf",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "61d8658b4a435eac729966cc94cdda077a8df5cd",
              "lessThan": "08c001c1e9444a3046c79a99aa93ac48073b18cc",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "61d8658b4a435eac729966cc94cdda077a8df5cd",
              "lessThan": "271c9b2eb60149afbeab28cb39e52f73bde9900c",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "61d8658b4a435eac729966cc94cdda077a8df5cd",
              "lessThan": "f025312b089474a54e4859f3453771314d9e3d4f",
              "versionType": "git"
            }
          ],
          "programFiles": [
            "drivers/scsi/qedf/qedf_main.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.11"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "4.11",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "5.4.251",
              "versionType": "semver",
              "lessThanOrEqual": "5.4.*"
            },
            {
              "status": "unaffected",
              "version": "5.10.188",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "status": "unaffected",
              "version": "5.15.121",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "status": "unaffected",
              "version": "6.1.39",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "status": "unaffected",
              "version": "6.3.13",
              "versionType": "semver",
              "lessThanOrEqual": "6.3.*"
            },
            {
              "status": "unaffected",
              "version": "6.4.4",
              "versionType": "semver",
              "lessThanOrEqual": "6.4.*"
            },
            {
              "status": "unaffected",
              "version": "6.5",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "drivers/scsi/qedf/qedf_main.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2025-12-30T13:16:17.943",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/08c001c1e9444a3046c79a99aa93ac48073b18cc",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/271c9b2eb60149afbeab28cb39e52f73bde9900c",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/961c8370c5f7e80a267680476e1bcff34bffe71a",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/ac64019e4d4b08c23edb117e0b2590985e33de1d",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/b1de5105d29b145b727b797e2d5de071ab3a7ca1",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/c316bde418af4c2a9df51149ed01d1bd8ca5bebf",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/f025312b089474a54e4859f3453771314d9e3d4f",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "vulnStatus": "Deferred",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qedf: Fix NULL dereference in error handling\n\nSmatch reported:\n\ndrivers/scsi/qedf/qedf_main.c:3056 qedf_alloc_global_queues()\nwarn: missing unwind goto?\n\nAt this point in the function, nothing has been allocated so we can return\ndirectly. In particular the \"qedf->global_queues\" have not been allocated\nso calling qedf_free_global_queues() will lead to a NULL dereference when\nwe check if (!gl[i]) and \"gl\" is NULL."
    },
    {
      "lang": "es",
      "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nscsi: qedf: Solución a la desreferencia de NULL en el manejo de errores\n\nSmatch informó:\n\ndrivers/scsi/qedf/qedf_main.c:3056 qedf_alloc_global_queues()\nadvertencia: ¿falta un goto de desenrollado?\n\nEn este punto de la función, nada ha sido asignado por lo que podemos retornar directamente. En particular, los 'qedf->global_queues' no han sido asignados, por lo que llamar a qedf_free_global_queues() conducirá a una desreferencia de NULL cuando comprobemos si (!gl[i]) y 'gl' es NULL."
    }
  ],
  "lastModified": "2026-06-17T06:47:09.947",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}