In the Linux kernel, the following vulnerability has been resolved:
scsi: lpfc: Fix null pointer dereference in lpfc_prep_els_iocb()
It is possible to call lpfc_issue_els_plogi() passing a did for which no
matching ndlp is found. A call is then made to lpfc_prep_els_iocb() with a
null pointer to a lpfc_nodelist structure resulting in a null pointer
dereference.
Fix by returning an error status if no valid ndlp is found. Fix up comments
regarding ndlp reference counting.
References
Configurations
Configuration 1 (hide)
|
History
06 Dec 2024, 18:41
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | |
| References | () https://git.kernel.org/stable/c/8dd1c125f7f838abad009b64bff5f0a11afe3cb6 - Patch | |
| References | () https://git.kernel.org/stable/c/9bdcfbed2a9fe24d2c7eaa1bad7c705e18de8cc7 - Patch | |
| References | () https://git.kernel.org/stable/c/a09677de458d500b00701f6036baa423d9995408 - Patch | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| CWE | CWE-476 | |
| First Time |
Linux linux Kernel
Linux |
21 Nov 2024, 06:35
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://git.kernel.org/stable/c/8dd1c125f7f838abad009b64bff5f0a11afe3cb6 - | |
| References | () https://git.kernel.org/stable/c/9bdcfbed2a9fe24d2c7eaa1bad7c705e18de8cc7 - | |
| References | () https://git.kernel.org/stable/c/a09677de458d500b00701f6036baa423d9995408 - |
28 Feb 2024, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-02-28 09:15
Updated : 2024-12-06 18:41
NVD link : CVE-2021-47045
Mitre link : CVE-2021-47045
CVE.ORG link : CVE-2021-47045
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-476
NULL Pointer Dereference