CVE-2023-54289

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-54289
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-54289.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-54289
Downstream
Related
Published
2025-12-30T12:23:28.430Z
Modified
2026-03-20T12:33:32.179905Z
Summary
scsi: qedf: Fix NULL dereference in error handling
Details

In the Linux kernel, the following vulnerability has been resolved:

scsi: qedf: Fix NULL dereference in error handling

Smatch reported:

drivers/scsi/qedf/qedfmain.c:3056 qedfallocglobalqueues() warn: missing unwind goto?

At this point in the function, nothing has been allocated so we can return directly. In particular the "qedf->globalqueues" have not been allocated so calling qedffreeglobalqueues() will lead to a NULL dereference when we check if (!gl[i]) and "gl" is NULL.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54289.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
61d8658b4a435eac729966cc94cdda077a8df5cd
Fixed
961c8370c5f7e80a267680476e1bcff34bffe71a
Fixed
ac64019e4d4b08c23edb117e0b2590985e33de1d
Fixed
b1de5105d29b145b727b797e2d5de071ab3a7ca1
Fixed
c316bde418af4c2a9df51149ed01d1bd8ca5bebf
Fixed
08c001c1e9444a3046c79a99aa93ac48073b18cc
Fixed
271c9b2eb60149afbeab28cb39e52f73bde9900c
Fixed
f025312b089474a54e4859f3453771314d9e3d4f

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-54289.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.11.0
Fixed
5.4.251
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.188
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.121
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.39
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.3.13
Type
ECOSYSTEM
Events
Introduced
6.4.0
Fixed
6.4.4

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-54289.json"