Log in Start free

Vulnerability · Published Oct 4, 2025 · Assigned by Linux

CVE-2023-53603scsi: qla2xxx: Avoid fcport pointer dereference

Medium 5.5

In plain English

A medium-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.1%top 96.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Avoid fcport pointer dereference Klocwork reported warning of NULL pointer may be dereferenced. The routine exits when sa_ctl is NULL and fcport is allocated after the exit call thus causing NULL fcport pointer to dereference at the time of exit. To avoid fcport pointer dereference, exit the routine when sa_ctl is NULL.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.52-1DEBIAN-CVE-2023-53603
Debian:13linux6.4.11-1DEBIAN-CVE-2023-53603
Debian:14linux6.4.11-1DEBIAN-CVE-2023-53603
Ubuntu:22.04:LTSlinux5.15.0-86.96UBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-aws5.15.0-1047.52UBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-azure5.15.0-1049.56UBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2023-53603
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1049.56.1UBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-gcp5.15.0-1044.52UBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2023-53603
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-gke5.15.0-1044.49UBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1030.35UBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2023-53603
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-ibm5.15.0-1040.43UBUNTU-CVE-2023-53603
Ubuntu:24.04:LTSlinux-intelno fix listedUBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1043.49UBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-kvm5.15.0-1044.49UBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-86.95UBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2023-53603
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1037.37UBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1018.18UBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1005.5UBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2023-53603
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2023-53603
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-oracle5.15.0-1045.51UBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-raspi5.15.0-1040.43UBUNTU-CVE-2023-53603
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-53603
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2023-53603
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2023-53603
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1025.29UBUNTU-CVE-2023-53603

Affected products (as reported)

VendorProductVersions
Linux Linux 7b2fbfa4b2cd3a24c1760b85d842e928070d4744 – before 4406fe8a96a946c7ea5724ee59625755a1d9c59de0fb8ce2bb9e52c846e54ad2c58b5b7beb13eb09 – before 477bc74ad1add644b606bff6ba1284943c42818ae0fb8ce2bb9e52c846e54ad2c58b5b7beb13eb09 – before 7bbeff613ec0560fb2f6f8b405288f3f043adf64e0fb8ce2bb9e52c846e54ad2c58b5b7beb13eb09 – before 6b504d06976fe4a61cc05dedc68b84fadb397f7747b583ad1f7e459689eb1bdd222279a6986ccd69d2deafaef0330a863b5e046c1154b605588d19f75.15.61 – before 5.15.1215.18.18 – before 5.19
Linux Linux 6.0

References