What’s Vulnerable › Vulnerabilities

CVE-2023-54014: scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport()

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-24 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() Klocwork reported warning of rport maybe NULL and will be dereferenced. rport returned by call to fc_bsg_to_rport() could be NULL and dereferenced. Check valid rport returned by fc_bsg_to_rport().

Affected products

• Linux kernel: 4.10 — fixed in 6.5

How to fix

Upgrade to a fixed version: Linux kernel 6.5. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/1b7e5bdf2be22ae8c61bdca5a5f96ec2746e9639
• https://git.kernel.org/stable/c/1ccd52b790a66b8b5f75c87eab8c3a37f941a2bf
• https://git.kernel.org/stable/c/921d6844625527a92d1178262a633cc88a8e61bd
• https://git.kernel.org/stable/c/af73f23a27206ffb3c477cac75b5fcf03410556e
• https://git.kernel.org/stable/c/ccd3bc595bda67db5a347b9050c2df28f292d3fb
• https://git.kernel.org/stable/c/ced5460eae772e847debbc0b65ef93aedab92d3f
• https://git.kernel.org/stable/c/e466930717ef18c112585a39fc6174d8eb441df5
• https://git.kernel.org/stable/c/f35bd94b4e11c41de90cd0fa72c9062e8196822f

Get alerted when CVE-2023-54014 or the next vulnerability affects your stack