CVE-2023-53038

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
02/05/2025
Last modified:
05/05/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read()<br /> <br /> If kzalloc() fails in lpfc_sli4_cgn_params_read(), then we rely on<br /> lpfc_read_object()&amp;#39;s routine to NULL check pdata.<br /> <br /> Currently, an early return error is thrown from lpfc_read_object() to<br /> protect us from NULL ptr dereference, but the errno code is -ENODEV.<br /> <br /> Change the errno code to a more appropriate -ENOMEM.

Impact