Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() The function core_scsi3_decode_spec_i_port(), in its error code path, unconditionally calls core_scsi3_lunacl_undepend_item() passing the dest_se_deve pointer, which may be NULL. This can lead to a NULL pointer dereference if dest_se_deve remains unset. SPC-3 PR SPEC_I_PT: Unable to locate dest_tpg Unable to handle kernel paging request at virtual address dfff800000000012 Call trace: core_scsi3_lunacl_undepend_item+0x2c/0xf0 [target_core_mod] (P) core_scsi3_decode_spec_i_port+0x120c/0x1c30 [target_core_mod] core_scsi3_emulate_pro_register+0x6b8/0xcd8 [target_core_mod] target_scsi3_emulate_pr_out+0x56c/0x840 [target_core_mod] Fix this by adding a NULL check before calling core_scsi3_lunacl_undepend_item()
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected f32ba612ef0f8eecaf6d2a5b04076ee7ea9ed039 before 70ddb8133fdb512d4b1f2b4fd1c9e518514f182c; affected f32ba612ef0f8eecaf6d2a5b04076ee7ea9ed039 before 1129e0e0a833acf90429e0f13951068d5f026e4f; affected f32ba612ef0f8eecaf6d2a5b04076ee7ea9ed039 before 1627dda4d70ceb1ba62af2e401af73c09abb1eb5; affected f32ba612ef0f8eecaf6d2a5b04076ee7ea9ed039 before 55dfffc5e94730370b08de02c0cf3b7c951bbe9e; affected f32ba612ef0f8eecaf6d2a5b04076ee7ea9ed039 before 7296c938df2445f342be456a6ff0b3931d97f4e5; affected f32ba612ef0f8eecaf6d2a5b04076ee7ea9ed039 before c412185d557578d3f936537ed639c4ffaaed4075; affected f32ba612ef0f8eecaf6d2a5b04076ee7ea9ed039 before d8ab68bdb294b09a761e967dad374f2965e1913f |
| Linux / Linux | affected 5.9; unaffected 0 before 5.9; unaffected 5.10.240 through 5.10.*; unaffected 5.15.187 through 5.15.*; unaffected 6.1.144 through 6.1.*; unaffected 6.6.97 through 6.6.*; unaffected 6.12.37 through 6.12.*; unaffected 6.15.6 through 6.15.*; unaffected 6.16 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/70ddb8133fdb512d4b1f2b4fd1c9e518514f182c
- https://git.kernel.org/stable/c/1129e0e0a833acf90429e0f13951068d5f026e4f
- https://git.kernel.org/stable/c/1627dda4d70ceb1ba62af2e401af73c09abb1eb5
- https://git.kernel.org/stable/c/55dfffc5e94730370b08de02c0cf3b7c951bbe9e
- https://git.kernel.org/stable/c/7296c938df2445f342be456a6ff0b3931d97f4e5
- https://git.kernel.org/stable/c/c412185d557578d3f936537ed639c4ffaaed4075
- https://git.kernel.org/stable/c/d8ab68bdb294b09a761e967dad374f2965e1913f
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.