Description
In the Linux kernel, the following vulnerability has been resolved:
scsi: lpfc: Fix null ndlp ptr dereference in abnormal exit path for GFT_ID
An error case exit from lpfc_cmpl_ct_cmd_gft_id() results in a call to lpfc_nlp_put() with a null pointer to a nodelist structure.
Changed lpfc_cmpl_ct_cmd_gft_id() to initialize nodelist pointer upon entry.
Metrics
CVSS 3.1 5.5/10
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 04c1d9c50ae32d6efd0b71024b3829051821c7a2, < 04e7cd8c85636a329d1a6e5a269a7c8b6f71c41c; >= 04c1d9c50ae32d6efd0b71024b3829051821c7a2, < 82dc1fe4324e2c897f2ed1c66f4fcff03094ac3a; >= 04c1d9c50ae32d6efd0b71024b3829051821c7a2, < 59b7e210a522b836a01516c71ee85d1d92c1f075 |
| Linux | Linux | 5.14 |
References
Timeline
- Published
- Oct 1, 2025
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed