Unscored CVE-2023-54014 EUVD-2025-205116GHSA-rvc2-c2hh-3j58

scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport()

Published Dec 24, 2025 · Updated May 11, 2026 · Assigned by Linux

Vendor: Linux Product: Linux Package: linux Package: linux Package: linux-allwinner-5.19 Package: linux-aws Package: linux-aws-5.0 Package: linux-aws-5.11 Package: linux-aws-5.13 Package: linux-aws-5.15 Package: linux-aws-5.19 Package: linux-aws-5.3 Package: linux-aws-5.4 Package: linux-aws-5.8 Package: linux-aws-6.2 Package: linux-aws-6.5 Package: linux-aws-fips Package: linux-aws-hwe Package: linux-azure Package: linux-azure-4.15 Package: linux-azure-5.11 Package: linux-azure-5.13 Package: linux-azure-5.15 Package: linux-azure-5.19 Package: linux-azure-5.3 Package: linux-azure-5.4 Package: linux-azure-5.8 Package: linux-azure-6.11 Package: linux-azure-6.2 Package: linux-azure-6.5 Package: linux-azure-edge Package: linux-azure-fde Package: linux-azure-fde-5.19 Package: linux-azure-fde-6.2 Package: linux-azure-fips Package: linux-bluefield Package: linux-fips Package: linux-gcp Package: linux-gcp-4.15 Package: linux-gcp-5.11 Package: linux-gcp-5.13 Package: linux-gcp-5.15 Package: linux-gcp-5.19 Package: linux-gcp-5.3 Package: linux-gcp-5.4 Package: linux-gcp-5.8 Package: linux-gcp-6.11 Package: linux-gcp-6.2 Package: linux-gcp-6.5 Package: linux-gcp-fips Package: linux-gke Package: linux-gke-4.15 Package: linux-gke-5.15 Package: linux-gke-5.4 Package: linux-gkeop Package: linux-gkeop-5.15 Package: linux-gkeop-5.4 Package: linux-hwe Package: linux-hwe-5.11 Package: linux-hwe-5.13 Package: linux-hwe-5.15 Package: linux-hwe-5.19 Package: linux-hwe-5.4 Package: linux-hwe-5.8 Package: linux-hwe-6.11 Package: linux-hwe-6.2 Package: linux-hwe-6.5 Package: linux-hwe-edge Package: linux-ibm Package: linux-ibm-5.15 Package: linux-ibm-5.4 Package: linux-intel-5.13 Package: linux-intel-iot-realtime Package: linux-intel-iotg Package: linux-intel-iotg-5.15 Package: linux-iot Package: linux-kvm Package: linux-lowlatency Package: linux-lowlatency-hwe-5.15 Package: linux-lowlatency-hwe-5.19 Package: linux-lowlatency-hwe-6.11 Package: linux-lowlatency-hwe-6.2 Package: linux-lowlatency-hwe-6.5 Package: linux-nvidia Package: linux-nvidia-6.11 Package: linux-nvidia-6.2 Package: linux-nvidia-6.5 Package: linux-nvidia-tegra Package: linux-nvidia-tegra-5.15 Package: linux-nvidia-tegra-igx Package: linux-oem Package: linux-oem-5.10 Package: linux-oem-5.13 Package: linux-oem-5.14 Package: linux-oem-5.17 Package: linux-oem-5.6 Package: linux-oem-6.0 Package: linux-oem-6.1 Package: linux-oem-6.11 Package: linux-oem-6.5 Package: linux-oem-6.8 Package: linux-oracle Package: linux-oracle-5.0 Package: linux-oracle-5.11 Package: linux-oracle-5.13 Package: linux-oracle-5.15 Package: linux-oracle-5.3 Package: linux-oracle-5.4 Package: linux-oracle-5.8 Package: linux-oracle-6.5 Package: linux-raspi Package: linux-raspi-5.4 Package: linux-raspi-realtime Package: linux-raspi2 Package: linux-realtime Package: linux-riscv Package: linux-riscv-5.11 Package: linux-riscv-5.15 Package: linux-riscv-5.19 Package: linux-riscv-5.8 Package: linux-riscv-6.14 Package: linux-riscv-6.5 Package: linux-starfive-5.19 Package: linux-starfive-6.2 Package: linux-starfive-6.5 Package: linux-vmware Package: linux-xilinx-zynqmp Platform: Linux Ecosystem: Debian Ecosystem: Ubuntu

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport()

Klocwork reported warning of rport maybe NULL and will be dereferenced.
rport returned by call to fc_bsg_to_rport() could be NULL and dereferenced.

Check valid rport returned by fc_bsg_to_rport().

Affected products

Vendor	Product	Affected	Fixed
Linux	Linux	4.10	4.14.322

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	linux	6.4.11-1	—
Debian 13	linux	6.4.11-1	—
Debian 12	linux	6.1.52-1	—

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu Nvidia-BlueField 22.04 LTS	linux-bluefield	5.15.0-1027.29	—
Ubuntu 24.04 LTS	linux-riscv +10	No fix yet	—
Ubuntu 22.04 LTS	linux	5.15.0-86.96	—
Ubuntu 22.04 LTS	linux-aws	5.15.0-1047.52	—
Ubuntu 22.04 LTS	linux-azure	5.15.0-1049.56	—
Ubuntu 22.04 LTS	linux-azure-fde	5.15.0-1049.56.1	—
Ubuntu 22.04 LTS	linux-gcp	5.15.0-1044.52	—
Ubuntu 22.04 LTS	linux-gke +1	5.15.0-1044.49	—
Ubuntu 22.04 LTS	linux-gkeop	5.15.0-1030.35	—
Ubuntu 22.04 LTS	linux-ibm +1	5.15.0-1040.43	—
Ubuntu 22.04 LTS	linux-intel-iotg	5.15.0-1043.49	—
Ubuntu 22.04 LTS	linux-lowlatency	5.15.0-86.95	—
Ubuntu 22.04 LTS	linux-nvidia	5.15.0-1037.37	—
Ubuntu 22.04 LTS	linux-nvidia-tegra	5.15.0-1018.18	—
Ubuntu 22.04 LTS	linux-nvidia-tegra-igx	5.15.0-1005.5	—
Ubuntu 22.04 LTS	linux-oracle	5.15.0-1045.51	—
Ubuntu 22.04 LTS	linux-riscv +32	No fix yet	—
Ubuntu 22.04 LTS	linux-xilinx-zynqmp	5.15.0-1025.29	—
Ubuntu 20.04 LTS	linux	5.4.0-166.183	—
Ubuntu 20.04 LTS	linux-aws	5.4.0-1113.123	—
Ubuntu 20.04 LTS	linux-aws-5.15	5.15.0-1047.52~20.04.1	—
Ubuntu 20.04 LTS	linux-azure	5.4.0-1119.126	—
Ubuntu 20.04 LTS	linux-azure-5.15	5.15.0-1049.56~20.04.1	—
Ubuntu 20.04 LTS	linux-bluefield	5.4.0-1074.80	—
Ubuntu 20.04 LTS	linux-gcp	5.4.0-1117.126	—
Ubuntu 20.04 LTS	linux-gcp-5.15	5.15.0-1044.52~20.04.1	—
Ubuntu 20.04 LTS	linux-gke +28	No fix yet	—
Ubuntu 20.04 LTS	linux-hwe-5.15	5.15.0-86.96~20.04.1	—
Ubuntu 20.04 LTS	linux-ibm	5.4.0-1060.65	—
Ubuntu 20.04 LTS	linux-ibm-5.15	5.15.0-1040.43~20.04.1	—
Ubuntu 20.04 LTS	linux-intel-iotg-5.15	5.15.0-1043.49~20.04.1	—
Ubuntu 20.04 LTS	linux-iot	5.4.0-1025.26	—
Ubuntu 20.04 LTS	linux-kvm	5.4.0-1102.108	—
Ubuntu 20.04 LTS	linux-lowlatency-hwe-5.15	5.15.0-86.95~20.04.1	—
Ubuntu 20.04 LTS	linux-nvidia-tegra-5.15	5.15.0-1018.18~20.04.1	—
Ubuntu 20.04 LTS	linux-oracle	5.4.0-1112.121	—
Ubuntu 20.04 LTS	linux-oracle-5.15	5.15.0-1045.51~20.04.1	—
Ubuntu 20.04 LTS	linux-raspi	5.4.0-1097.109	—
Ubuntu 20.04 LTS	linux-riscv-5.15	5.15.0-1043.47~20.04.1	—
Ubuntu 20.04 LTS	linux-xilinx-zynqmp	5.4.0-1033.37	—
Ubuntu 18.04 LTS	linux-gcp +14	No fix yet	—

Show 10 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Ubuntu 16.04 LTS	linux-hwe-edge	No fix yet	—
Ubuntu Pro Realtime 22.04 LTS	linux-intel-iot-realtime	5.15.0-1040.42	—
Ubuntu Pro Realtime 22.04 LTS	linux-realtime	5.15.0-1048.54	—
Ubuntu Pro FIPS 20.04 LTS	linux-fips +3	No fix yet	—
Ubuntu Pro FIPS 18.04 LTS	linux-fips +3	No fix yet	—
Ubuntu Pro FIPS-updates 20.04 LTS	linux-aws-fips	5.4.0-1113.123+fips1	—
Ubuntu Pro FIPS-updates 20.04 LTS	linux-azure-fips	5.4.0-1119.126+fips1	—
Ubuntu Pro FIPS-updates 20.04 LTS	linux-fips	5.4.0-1088.97	—
Ubuntu Pro FIPS-updates 20.04 LTS	linux-gcp-fips	5.4.0-1117.126+fips1	—
Ubuntu Pro FIPS-updates 18.04 LTS	linux-fips +3	No fix yet	—
Ubuntu Pro FIPS-preview 22.04 LTS	linux-fips	No fix yet	—
Ubuntu Pro 18.04 LTS	linux +5	No fix yet	—
Ubuntu Pro 18.04 LTS	linux-aws-5.4	5.4.0-1113.123~18.04.1	—
Ubuntu Pro 18.04 LTS	linux-azure-5.4	5.4.0-1119.126~18.04.2	—
Ubuntu Pro 18.04 LTS	linux-gcp-5.4	5.4.0-1117.126~18.04.1	—
Ubuntu Pro 18.04 LTS	linux-hwe-5.4	5.4.0-166.183~18.04.2	—
Ubuntu Pro 18.04 LTS	linux-ibm-5.4	5.4.0-1060.65~18.04.1	—
Ubuntu Pro 18.04 LTS	linux-oracle-5.4	5.4.0-1112.121~18.04.4	—
Ubuntu Pro 18.04 LTS	linux-raspi-5.4	5.4.0-1097.109~18.04.2	—
Ubuntu Pro 16.04 LTS	linux-gcp +4	No fix yet	—
Ubuntu Pro 14.04 LTS	linux-azure	No fix yet	—

Red Hat

Security tracker ↗

Release	Package	Fixed in	Advisory
RHEL 9	bpftool	7.3.0-427.13.1.el9_4	RHSA-2024:2394
RHEL 9	rv +64	5.14.0-427.13.1.el9_4	RHSA-2024:2394
RHEL 8	perf +26	4.18.0-553.el8_10	RHSA-2024:3138

Rocky Linux

Release	Package	Fixed in	Advisory
Rocky Linux 8	kernel	4.18.0-553.123.1.el8_10.cloud.0.1	RXSA-2024:3138

SUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
SLES 15 SP7	kernel-64kb +6	6.4.0-150700.53.28.1	SUSE-SU-2026:0315-1
SLES 15 SP7	kernel-azure +2	6.4.0-150700.20.24.1	SUSE-SU-2026:0281-1
SLES 15 SP7	kernel-default-base	6.4.0-150700.53.28.1.150700.17.19.1	SUSE-SU-2026:0315-1
SLES 15 SP6	kernel-64kb +6	6.4.0-150600.23.84.1	SUSE-SU-2026:0293-1
SLES 15 SP6	kernel-default-base	6.4.0-150600.23.84.1.150600.12.38.1	SUSE-SU-2026:0293-1
SLES 15 SP5	kernel-64kb +6	5.14.21-150500.55.133.1	SUSE-SU-2026:0317-1
SLES 15 SP5	kernel-default-base	5.14.21-150500.55.133.1.150500.6.65.1	SUSE-SU-2026:0317-1
SLES 15 SP4	kernel-64kb +6	5.14.21-150400.24.194.1	SUSE-SU-2026:0617-1
SLES 15 SP4	kernel-default-base	5.14.21-150400.24.194.1.150400.24.98.3	SUSE-SU-2026:0617-1
SLES 12 SP5	kernel-syms +2	4.12.14-122.290.1	SUSE-SU-2026:0316-1

Show 16 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
SLES for SAP 15 SP6	kernel-default-base	6.4.0-150600.23.84.1.150600.12.38.1	SUSE-SU-2026:0293-1
SLES for SAP 15 SP6	kernel-docs +4	6.4.0-150600.23.84.1	SUSE-SU-2026:0293-1
SLES for SAP 15 SP5	kernel-default-base	5.14.21-150500.55.133.1.150500.6.65.1	SUSE-SU-2026:0317-1
SLES for SAP 15 SP5	kernel-docs +4	5.14.21-150500.55.133.1	SUSE-SU-2026:0317-1
SLES for SAP 15 SP4	kernel-default-base	5.14.21-150400.24.194.1.150400.24.98.3	SUSE-SU-2026:0617-1
SLES for SAP 15 SP4	kernel-docs +4	5.14.21-150400.24.194.1	SUSE-SU-2026:0617-1
SLE Micro 6.1	kernel-default-base	6.4.0-39.1.21.16	SUSE-SU-2026:20498-1
SLE Micro 6.1	kernel-rt +1	6.4.0-40.1	SUSE-SU-2026:20876-1
SLE Micro 6.1	kernel-source +2	6.4.0-39.1	SUSE-SU-2026:20498-1
SLE Micro 6.0	kernel-default-base	6.4.0-39.1.21.16	SUSE-SU-2026:20477-1
SLE Micro 6.0	kernel-rt +1	6.4.0-40.1	SUSE-SU-2026:20845-1
SLE Micro 6.0	kernel-source +2	6.4.0-39.1	SUSE-SU-2026:20477-1
SLE Micro 5.5	kernel-default-base	5.14.21-150500.55.133.1.150500.6.65.1	SUSE-SU-2026:0317-1
SLE Micro 5.5	kernel-rt +1	5.14.21-150500.13.118.1	SUSE-SU-2026:0263-1
SLE Micro 5.5	kernel-source +1	5.14.21-150500.55.133.1	SUSE-SU-2026:0317-1
SLE Micro 5.4	kernel-default	5.14.21-150400.24.194.1	SUSE-SU-2026:0617-1
SLE Micro 5.4	kernel-default-base	5.14.21-150400.24.194.1.150400.24.98.3	SUSE-SU-2026:0617-1
SLE Micro 5.4	kernel-rt +1	5.14.21-150400.15.142.1	SUSE-SU-2026:0411-1
SLE Micro 5.3	kernel-default	5.14.21-150400.24.194.1	SUSE-SU-2026:0617-1
SLE Micro 5.3	kernel-default-base	5.14.21-150400.24.194.1.150400.24.98.3	SUSE-SU-2026:0617-1
SLE Micro 5.3	kernel-rt +1	5.14.21-150400.15.142.1	SUSE-SU-2026:0411-1
SLE Live Patching 15 SP7	kernel-default	6.4.0-150700.53.28.1	SUSE-SU-2026:0315-1
SLE Live Patching 15 SP7	kernel-livepatch-SLE15-SP7-RT_Update_8	1-150700.1.3.1	SUSE-SU-2026:0278-1
SLE Live Patching 15 SP7	kernel-livepatch-SLE15-SP7_Update_8	1-150700.15.3.1	SUSE-SU-2026:0315-1
SLE Live Patching 15 SP6	kernel-default	6.4.0-150600.23.84.1	SUSE-SU-2026:0293-1
SLE Live Patching 15 SP6	kernel-livepatch-SLE15-SP6_Update_19	1-150600.13.3.1	SUSE-SU-2026:0293-1
SLE Live Patching 15 SP5	kernel-default	5.14.21-150500.55.133.1	SUSE-SU-2026:0317-1
SLE Live Patching 15 SP5	kernel-livepatch-SLE15-SP5_Update_34	1-150500.11.3.1	SUSE-SU-2026:0317-1
SLE Live Patching 15 SP4	kernel-default	5.14.21-150400.24.194.1	SUSE-SU-2026:0617-1
SLE Live Patching 15 SP4	kernel-livepatch-SLE15-SP4_Update_48	1-150400.9.7.1	SUSE-SU-2026:0617-1
SLE Live Patching 12 SP5	kernel-default	4.12.14-122.290.1	SUSE-SU-2026:0316-1
SLE Live Patching 12 SP5	kgraft-patch-SLE12-SP5_Update_76	1-8.7.1	SUSE-SU-2026:0316-1
SLE HPC 15 SP5	kernel-64kb +5	5.14.21-150500.55.133.1	SUSE-SU-2026:0317-1
SLE HPC 15 SP5	kernel-default-base	5.14.21-150500.55.133.1.150500.6.65.1	SUSE-SU-2026:0317-1
SLE HPC 15 SP4	kernel-64kb +5	5.14.21-150400.24.194.1	SUSE-SU-2026:0617-1
SLE HPC 15 SP4	kernel-default-base	5.14.21-150400.24.194.1.150400.24.98.3	SUSE-SU-2026:0617-1
SUSE Real Time Module 15 SP7	kernel-rt +2	6.4.0-150700.7.28.1	SUSE-SU-2026:0278-1

openSUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
openSUSE Leap 15.6	dtb-aarch64 +10	6.4.0-150600.23.84.1	SUSE-SU-2026:0293-1
openSUSE Leap 15.6	kernel-default-base	6.4.0-150600.23.84.1.150600.12.38.1	SUSE-SU-2026:0293-1

Amazon Linux

Release	Package	Fixed in	Advisory
Amazon Linux 2	kernel-livepatch-4.14.322-244.536	1.0-0.amzn2	ALAS2-2023-2268
Amazon Linux 2	perf +8	4.14.322-244.536.amzn2	ALAS2-2023-2268

Advisories 18

WID-SEC-2025-2920 Linux Kernel: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 5, 2026
RHSA-2024:3138 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2024:2394 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RXSA-2024:3138 Moderate: kernel security, bug fix, and enhancement update Rocky Linux Security Advisories · May 29, 2026
SUSE-SU-2026:20876-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 31, 2026
SUSE-SU-2026:20845-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 28, 2026
SUSE-SU-2026:20498-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
SUSE-SU-2026:20477-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
SUSE-SU-2026:0293-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
SUSE-SU-2026:0316-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
SUSE-SU-2026:0317-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
SUSE-SU-2026:0281-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
SUSE-SU-2026:0278-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
SUSE-SU-2026:0315-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
SUSE-SU-2026:0617-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 26, 2026
SUSE-SU-2026:0411-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 10, 2026
ALAS2-2023-2268 Important: kernel security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Feb 8, 2026
SUSE-SU-2026:0263-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026

References