CVE-2023-53124: scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-05-02 · updated 2026-06-17
Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() Port is allocated by sas_port_alloc_num() and rphy is allocated by either sas_end_device_alloc() or sas_expander_alloc(), all of which may return NULL. So we need to check the rphy to avoid possible NULL pointer access. If sas_rphy_add() returned with failure, rphy is set to NULL. We would access the rphy in the following lines which would also result NULL pointer access.

Affected products

Linux kernel: from 5.4.229 before 5.4.238; from 5.10.163 before 5.10.176; from 5.15.86 before 5.15.104; from 6.0.16 before 6.1; from 6.1.2 before 6.1.21; from 6.2 before 6.2.8 — fixed in 5.10.176, 5.15.104, 5.4.238, 6.1, 6.1.21, 6.2.8

How to fix

Upgrade to a fixed version: Linux kernel 5.10.176, 5.15.104, 5.4.238, 6.1. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-53124 or the next vulnerability affects your stack