In the Linux kernel, the following vulnerability has been resolved:
scsi: qedf: Fix NULL dereference in error handling
Smatch reported:
drivers/scsi/qedf/qedfmain.c:3056 qedfallocglobalqueues() warn: missing unwind goto?
At this point in the function, nothing has been allocated so we can return directly. In particular the "qedf->globalqueues" have not been allocated so calling qedffreeglobalqueues() will lead to a NULL dereference when we check if (!gl[i]) and "gl" is NULL.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54289.json",
"cna_assigner": "Linux"
}