CVSS 5.5 · Medium EPSS 0,19%
Kerentanan NULL Pointer Dereference pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.
In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() Port is allocated by sas_port_alloc_num() and rphy is allocated by either sas_end_device_alloc() or sas_expander_alloc(), all of which may return NULL. So we need to check the rphy to avoid possible NULL pointer access. If sas_rphy_add() returned with failure, rphy is set to NULL. We would access the rphy in the following lines which would also result NULL pointer access.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| linux | linux kernel | Versi 5.4.229 hingga sebelum 5.4.238 |
| linux | linux kernel | Versi 5.10.163 hingga sebelum 5.10.176 |
| linux | linux kernel | Versi 5.15.86 hingga sebelum 5.15.104 |
| linux | linux kernel | Versi 6.0.16 hingga sebelum 6.1 |
| linux | linux kernel | Versi 6.1.2 hingga sebelum 6.1.21 |
| linux | linux kernel | Versi 6.2 hingga sebelum 6.2.8 |
| linux | linux kernel | Versi 6.3 rc1 |
| linux | linux kernel | Versi 6.3 rc2 |