CVE-2023-54289scsi: qedf: Fix NULL dereference in error handling
- —Not scoredno CVSS score yet
- 0.21%Exploitation in 30 daysEPSS · top 89% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Fix NULL dereference in error handling Smatch reported: drivers/scsi/qedf/qedf_main.c:3056 qedf_alloc_global_queues() warn: missing unwind goto? At this point in the function, nothing has been allocated so we can return directly. In particular the "qedf->global_queues" have not been allocated so calling qedf_free_global_queues() will lead to a NULL dereference when we check if (!gl[i]) and "gl" is NULL.
Timeline
ID reserved
By Linux
Published
- 4 months later
· 4 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
No CVSS score yet: neither the CNA, CISA nor NVD has scored this CVE. NVD status: Deferred.
- EPSS (exploitation in 30 days)
- 0.21% · top 89% of all CVEs (13 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Not scored.
Affected products
- affected 61d8658b4a435eac729966cc94cdda077a8df5cd – < 961c8370c5f7e80a267680476e1bcff34bffe71a
- affected 61d8658b4a435eac729966cc94cdda077a8df5cd – < ac64019e4d4b08c23edb117e0b2590985e33de1d
- affected 61d8658b4a435eac729966cc94cdda077a8df5cd – < b1de5105d29b145b727b797e2d5de071ab3a7ca1
- affected 61d8658b4a435eac729966cc94cdda077a8df5cd – < c316bde418af4c2a9df51149ed01d1bd8ca5bebf
- affected 61d8658b4a435eac729966cc94cdda077a8df5cd – < 08c001c1e9444a3046c79a99aa93ac48073b18cc
- affected 61d8658b4a435eac729966cc94cdda077a8df5cd – < 271c9b2eb60149afbeab28cb39e52f73bde9900c
- affected 61d8658b4a435eac729966cc94cdda077a8df5cd – < f025312b089474a54e4859f3453771314d9e3d4f
- affected 4.11
- unaffected < 4.11
- unaffected 5.4.251 – ≤ 5.4.*
- unaffected 5.10.188 – ≤ 5.10.*
- unaffected 5.15.121 – ≤ 5.15.*
- unaffected 6.1.39 – ≤ 6.1.*
- unaffected 6.3.13 – ≤ 6.3.*
- unaffected 6.4.4 – ≤ 6.4.*
- unaffected 6.5 – ≤ *
References
References7
- https://git.kernel.org/stable/c/961c8370c5f7e80a267680476e1bcff34bffe71a (opens in a new tab)
- https://git.kernel.org/stable/c/ac64019e4d4b08c23edb117e0b2590985e33de1d (opens in a new tab)
- https://git.kernel.org/stable/c/b1de5105d29b145b727b797e2d5de071ab3a7ca1 (opens in a new tab)
- https://git.kernel.org/stable/c/c316bde418af4c2a9df51149ed01d1bd8ca5bebf (opens in a new tab)
- https://git.kernel.org/stable/c/08c001c1e9444a3046c79a99aa93ac48073b18cc (opens in a new tab)
- https://git.kernel.org/stable/c/271c9b2eb60149afbeab28cb39e52f73bde9900c (opens in a new tab)
- https://git.kernel.org/stable/c/f025312b089474a54e4859f3453771314d9e3d4f (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2023-60515 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2023-54289)Record last updated .