What’s Vulnerable › Vulnerabilities

CVE-2023-53451: scsi: qla2xxx: Fix potential NULL pointer dereference

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-01 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix potential NULL pointer dereference Klocwork tool reported 'cur_dsd' may be dereferenced. Add fix to validate pointer before dereferencing the pointer.

Affected products

• Linux kernel: from 2.6.35 before 4.14.322; from 4.15 before 4.19.291; from 4.20 before 5.4.251; from 5.5 before 5.10.188; from 5.11 before 5.15.121; from 5.16 before 6.1.40 — fixed in 4.14.322, 4.19.291, 5.10.188, 5.15.121, 5.4.251, 6.1.40

How to fix

Upgrade to a fixed version: Linux kernel 4.14.322, 4.19.291, 5.10.188, 5.15.121. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/02405f4023866ae91a611b5b85cb2e074ec2de5a
• https://git.kernel.org/stable/c/2bea9c1c983152c5411f5a2f1113cb790ce1389d
• https://git.kernel.org/stable/c/464ea494a40c6e3e0e8f91dd325408aaf21515ba
• https://git.kernel.org/stable/c/4f90a8b0481615622bd0558aa8cf361bea872045
• https://git.kernel.org/stable/c/5a52a2e14fe866541bbc0033058e44bf0bf0c580
• https://git.kernel.org/stable/c/af7affc0f6b82a5bde430fc4f0dcf70963442fbc
• https://git.kernel.org/stable/c/ce2cdbe530b0066bae1f98dbab590a232d507eaa
• https://git.kernel.org/stable/c/ee4c9a93238b9ce3703942500cb1aeacf77090d2

Get alerted when CVE-2023-53451 or the next vulnerability affects your stack