> CVE-2023-53124

« BACK_TO_HOME
PUBLISHED
2025-05-02 16:15
MODIFIED
2025-05-05 20:54
EPSS (Prob. Exploit)
0.19%
Top 91.3%
DATA SOURCES:
NVD 🔗 2025-10-18 RED HAT 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-11-08 OSV 🔗 2026-11-08

> DESCRIPTION

In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() Port is allocated by sas_port_alloc_num() and rphy is allocated by either sas_end_device_alloc() or sas_expander_alloc(), all of which may return NULL. So we need to check the rphy to avoid possible NULL pointer access. If sas_rphy_add() returned with failure, rphy is set to NULL. We would access the rphy in the following lines which would also result NULL pointer access.

> AFFECTED_PRODUCTS

Red Hat - Red Hat Enterprise Linux 8
Version: 4.18.0
Red Hat - Red Hat Enterprise Linux 9
Version: 5.14.0

> RED HAT SEVERITY ASSESSMENT

THREAT SEVERITY
Moderate

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()

AFFECTED PACKAGES:
Unknown / Unknown
63 versions affected
Linux / Kernel

> HISTORIQUE DES MODIFICATIONS

Première apparition
02/05/2025 16:15
Source: NVD
📊 ENRICHISSEMENT 18/10/2025 14:47
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
📊 ENRICHISSEMENT 18/10/2025 12:15
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
N/A
Nouvelle valeur:
{ "threat_severity": "Moderate", "severity_scale": null }
📊 ENRICHISSEMENT 18/10/2025 12:15
REDHAT
Champ modifié: Red Hat
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 3 Dernière mise à jour: 1 year ago
« BACK_TO_HOME