CVE-2023-54289

Not scored yetLast modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: qedf: Fix NULL dereference in error handling

Smatch reported:

drivers/scsi/qedf/qedf_main.c:3056 qedf_alloc_global_queues() warn: missing unwind goto?

At this point in the function, nothing has been allocated so we can return directly. In particular the "qedf->global_queues" have not been allocated so calling qedf_free_global_queues() will lead to a NULL dereference when we check if (!gl[i]) and "gl" is NULL.

Metrics

No CVSS score has been published yet.

Affected software

VendorProductVersions
LinuxLinux>= 61d8658b4a435eac729966cc94cdda077a8df5cd, < 961c8370c5f7e80a267680476e1bcff34bffe71a; >= 61d8658b4a435eac729966cc94cdda077a8df5cd, < ac64019e4d4b08c23edb117e0b2590985e33de1d; >= 61d8658b4a435eac729966cc94cdda077a8df5cd, < b1de5105d29b145b727b797e2d5de071ab3a7ca1; >= 61d8658b4a435eac729966cc94cdda077a8df5cd, < c316bde418af4c2a9df51149ed01d1bd8ca5bebf; >= 61d8658b4a435eac729966cc94cdda077a8df5cd, < 08c001c1e9444a3046c79a99aa93ac48073b18cc; >= 61d8658b4a435eac729966cc94cdda077a8df5cd, < 271c9b2eb60149afbeab28cb39e52f73bde9900c; >= 61d8658b4a435eac729966cc94cdda077a8df5cd, < f025312b089474a54e4859f3453771314d9e3d4f
LinuxLinux4.11

References

Timeline

Published
Dec 30, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2023

CVE-2023-54296.5The Information Reel plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 10.0 dCVE-2023-54291In the Linux kernel, the following vulnerability has been resolved: vduse: fix NULL pointer dereference vduse_vdpa_set_vq_affinity callbacCVE-2023-542929.8In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix data race on CQP request done KCSAN detects a data racCVE-2023-54293In the Linux kernel, the following vulnerability has been resolved: bcache: fixup btree_cache_wait list damage We get a kernel crash aboutCVE-2023-54294In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix memleak of md thread In raid10_run(), if setup_conf() sCVE-2023-54295In the Linux kernel, the following vulnerability has been resolved: mtd: spi-nor: Fix shift-out-of-bounds in spi_nor_set_erase_type spi_noCVE-2023-54296In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migratioCVE-2023-54297In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix memory leak after finding block group with super blocCVE-2023-54298In the Linux kernel, the following vulnerability has been resolved: thermal: intel: quark_dts: fix error pointer dereference If alloc_soc_CVE-2023-54299In the Linux kernel, the following vulnerability has been resolved: usb: typec: bus: verify partner exists in typec_altmode_attention SomeCVE-2023-54306.5The Jquery news ticker plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 3.0 CVE-2023-54300In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx For
CVE-2023-54289: Unscored | Vulnix