CVE-2023-52809
published 2024-05-21CVE-2023-52809: In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()…
PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.25%
16.2th percentile
In the Linux kernel, the following vulnerability has been resolved:
scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
fc_lport_ptp_setup() did not check the return value of fc_rport_create()
which can return NULL and would cause a NULL pointer dereference. Address
this issue by checking return value of fc_rport_create() and log error
message on fc_rport_create() failed.
Affected
25 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.64-1 (bookworm) | linux 6.1.64-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a < 930f0aaba4820d6362de4e6ed569eaf444f1ea4e | 930f0aaba4820d6362de4e6ed569eaf444f1ea4e |
| linux | linux | >= 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a < 77072ec41d6ab3718c3fc639bc149b8037caedfa | 77072ec41d6ab3718c3fc639bc149b8037caedfa |
| linux | linux | >= 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a < b549acf999824d4f751ca57965700372f2f3ad00 | b549acf999824d4f751ca57965700372f2f3ad00 |
| linux | linux | >= 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a < bb83f79f90e92f46466adcfd4fd264a7ae0f0f01 | bb83f79f90e92f46466adcfd4fd264a7ae0f0f01 |
| linux | linux | >= 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a < 56d78b5495ebecbb9395101f3be177cd0a52450b | 56d78b5495ebecbb9395101f3be177cd0a52450b |
| linux | linux | >= 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a < 442fd24d7b6b29e4a9cd9225afba4142d5f522ba | 442fd24d7b6b29e4a9cd9225afba4142d5f522ba |
| linux | linux | >= 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a < f6fe7261b92b21109678747f36df9fdab1e30c34 | f6fe7261b92b21109678747f36df9fdab1e30c34 |
| linux | linux | >= 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a < 6b9ecf4e1032e645873933e5b43cbb84cac19106 | 6b9ecf4e1032e645873933e5b43cbb84cac19106 |
| linux | linux | >= 42e9a92fe6a9095bd68a379aaec7ad2be0337f7a < 4df105f0ce9f6f30cda4e99f577150d23f0c9c5f | 4df105f0ce9f6f30cda4e99f577150d23f0c9c5f |
| linux | linux_kernel | < 4.14.331 | 4.14.331 |
| linux | linux_kernel | >= 0 < 5.10.205-1 | 5.10.205-1 |
| linux | linux_kernel | >= 0 < 6.1.64-1 | 6.1.64-1 |
| linux | linux_kernel | >= 0 < 6.6.8-1 | 6.6.8-1 |
| linux | linux_kernel | >= 0 < 6.6.8-1 | 6.6.8-1 |
| linux | linux_kernel | >= 0 < 4.4.0-259.293 | 4.4.0-259.293 |
| linux | linux_kernel | >= 0 < 4.15.0-229.241 | 4.15.0-229.241 |
| linux | linux_kernel | >= 4.15 < 4.19.300 | 4.19.300 |
| linux | linux_kernel | >= 4.20 < 5.4.262 | 5.4.262 |
| linux | linux_kernel | >= 5.11 < 5.15.140 | 5.15.140 |
| linux | linux_kernel | >= 5.16 < 6.1.64 | 6.1.64 |
| linux | linux_kernel | >= 5.5 < 5.10.202 | 5.10.202 |
| linux | linux_kernel | >= 6.2 < 6.5.13 | 6.5.13 |
| linux | linux_kernel | >= 6.6 < 6.6.3 | 6.6.3 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
vendor_ubuntu5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Siemens SINEC OS
cisa_ics·2025-08-14
Siemens SINEC OS
ICS Advisory
##
Siemens SINEC OS
Release DateAugust 14, 2025
Alert CodeICSA-25-226-15
Related topics:
Industrial Control System Vulnerabilities, Industrial Control Systems
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v3.1 9.1
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Siemens
- Equipment: RUGGEDCOM, SCALANCE
- Vulnerabilities: NULL Pointer Dereference, Use After Free, Unchecked Input for Loop Condition, Out-of-bounds Write, Ou
Ubuntu
Linux kernel (Azure) vulnerabilities
vendor_ubuntu·2024-10-17·CVSS 5.5
CVE-2024-42154 [MEDIUM] Linux kernel (Azure) vulnerabilities
Title: Linux kernel (Azure) vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
It was discovered that the JFS file system contained an out-of-bounds read
vulnerability when printing xattr debug information. A local attacker could
use this to cause a denial of service (system crash).
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- GPU drivers;
- Greybus drivers;
- Modular ISDN driver;
- Multiple devices driver;
- Network drivers;
- SCSI drivers;
- VFIO drivers;
- F2FS file system;
- GFS2 file system;
- JFS file system;
- NILFS2 file system;
- Kernel debugger infrastructure;
- Bluetooth subsystem;
- IPv4 networking;
- L2TP prot
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2024-09-26·CVSS 5.5
CVE-2021-47188 [MEDIUM] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- GPU drivers;
- Input Device (Tablet) drivers;
- Modular ISDN driver;
- Multiple devices driver;
- Network drivers;
- Near Field Communication (NFC) drivers;
- SCSI drivers;
- GCT GDM724x LTE driver;
- USB subsystem;
- VFIO drivers;
- GFS2 file system;
- JFS file system;
- NILFS2 file system;
- Networking core;
- IPv4 networking;
- L2TP protocol;
- Netfilter;
- RxRPC session sockets;
(CVE-2024-26651, CVE-2024-38583, CVE-2023-52527, CVE-2024-26880,
CVE-2022-48850, CVE-2024-26733, CVE-2021-47188, CVE-2024-42154,
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2024-09-23·CVSS 5.5
CVE-2024-26880 [MEDIUM] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
It was discovered that the JFS file system contained an out-of-bounds read
vulnerability when printing xattr debug information. A local attacker could
use this to cause a denial of service (system crash).
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- GPU drivers;
- Greybus drivers;
- Modular ISDN driver;
- Multiple devices driver;
- Network drivers;
- SCSI drivers;
- VFIO drivers;
- F2FS file system;
- GFS2 file system;
- JFS file system;
- NILFS2 file system;
- Kernel debugger infrastructure;
- Bluetooth subsystem;
- IPv4 networking;
- L2TP protocol;
-
Red Hat
kernel: scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
vendor_redhat·2024-05-21·CVSS 5.5
CVE-2023-52809 [MEDIUM] CWE-476 kernel: scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
kernel: scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
In the Linux kernel, the following vulnerability has been resolved:
scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
fc_lport_ptp_setup() did not check the return value of fc_rport_create()
which can return NULL and would cause a NULL pointer dereference. Address
this issue by checking return value of fc_rport_create() and log error
message on fc_rport_create() failed.
Package: kernel (Red Hat Enterprise Linux 6) - Out of support scope
Package: kernel (Red Hat Enterprise Linux 7) - Out of support scope
Package: kernel-rt (Red Hat Enterprise Linux 7) - Out of support scope
Package: kernel-rt (Red Hat Enterprise Linux 8) - Affected
Package: kernel-rt (Red Hat Enterprise Linux
Debian
CVE-2023-52809: linux - In the Linux kernel, the following vulnerability has been resolved: scsi: libfc...
vendor_debian·2023·CVSS 5.5
CVE-2023-52809 [MEDIUM] CVE-2023-52809: linux - In the Linux kernel, the following vulnerability has been resolved: scsi: libfc...
In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() fc_lport_ptp_setup() did not check the return value of fc_rport_create() which can return NULL and would cause a NULL pointer dereference. Address this issue by checking return value of fc_rport_create() and log error message on fc_rport_create() failed.
Scope: local
bookworm: resolved (fixed in 6.1.64-1)
bullseye: resolved (fixed in 5.10.205-1)
forky: resolved (fixed in 6.6.8-1)
sid: resolved (fixed in 6.6.8-1)
trixie: resolved (fixed in 6.6.8-1)
OSV
linux-azure vulnerabilities
osv·2024-10-17·CVSS 5.5
[MEDIUM] linux-azure vulnerabilities
linux-azure vulnerabilities
It was discovered that the JFS file system contained an out-of-bounds read
vulnerability when printing xattr debug information. A local attacker could
use this to cause a denial of service (system crash).
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- GPU drivers;
- Greybus drivers;
- Modular ISDN driver;
- Multiple devices driver;
- Network drivers;
- SCSI drivers;
- VFIO drivers;
- F2FS file system;
- GFS2 file system;
- JFS file system;
- NILFS2 file system;
- Kernel debugger infrastructure;
- Bluetooth subsystem;
- IPv4 networking;
- L2TP protocol;
- Netfilter;
- RxRPC session sockets;
(CVE-2024-42154, CVE-2023-52527, CVE-2
OSV
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
osv·2024-09-26·CVSS 5.5
[MEDIUM] linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- GPU drivers;
- Input Device (Tablet) drivers;
- Modular ISDN driver;
- Multiple devices driver;
- Network drivers;
- Near Field Communication (NFC) drivers;
- SCSI drivers;
- GCT GDM724x LTE driver;
- USB subsystem;
- VFIO drivers;
- GFS2 file system;
- JFS file system;
- NILFS2 file system;
- Networking core;
- IPv4 networking;
- L2TP protocol;
- Netfilter;
- RxRPC session sockets;
(CVE-2024-26651, CVE-2024-38583, CVE-2023-52527, CVE-2024-26880,
CVE-2022-48850, CVE-2024-26733, CVE-2021-47188, CVE-2024-42154,
CVE-2023-52809, CVE-2024-42228, CVE-2022
OSV
linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle vulnerabilities
osv·2024-09-23·CVSS 5.5
[MEDIUM] linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle vulnerabilities
linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle vulnerabilities
It was discovered that the JFS file system contained an out-of-bounds read
vulnerability when printing xattr debug information. A local attacker could
use this to cause a denial of service (system crash).
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- GPU drivers;
- Greybus drivers;
- Modular ISDN driver;
- Multiple devices driver;
- Network drivers;
- SCSI drivers;
- VFIO drivers;
- F2FS file system;
- GFS2 file system;
- JFS file system;
- NILFS2 file system;
- Kernel debugger infrastructure;
- Bluetooth subsystem
OSV
CVE-2023-52809: In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() fc_lpo
osv·2024-05-21·CVSS 5.5
CVE-2023-52809 [MEDIUM] CVE-2023-52809: In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() fc_lpo
In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() fc_lport_ptp_setup() did not check the return value of fc_rport_create() which can return NULL and would cause a NULL pointer dereference. Address this issue by checking return value of fc_rport_create() and log error message on fc_rport_create() failed.
GHSA
GHSA-rgr4-wrx9-jm8q: In the Linux kernel, the following vulnerability has been resolved:
scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
fc_l
ghsa_unreviewed·2024-05-21
CVE-2023-52809 [MEDIUM] CWE-476 GHSA-rgr4-wrx9-jm8q: In the Linux kernel, the following vulnerability has been resolved:
scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
fc_l
In the Linux kernel, the following vulnerability has been resolved:
scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
fc_lport_ptp_setup() did not check the return value of fc_rport_create()
which can return NULL and would cause a NULL pointer dereference. Address
this issue by checking return value of fc_rport_create() and log error
message on fc_rport_create() failed.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/442fd24d7b6b29e4a9cd9225afba4142d5f522bahttps://git.kernel.org/stable/c/4df105f0ce9f6f30cda4e99f577150d23f0c9c5fhttps://git.kernel.org/stable/c/56d78b5495ebecbb9395101f3be177cd0a52450bhttps://git.kernel.org/stable/c/6b9ecf4e1032e645873933e5b43cbb84cac19106https://git.kernel.org/stable/c/77072ec41d6ab3718c3fc639bc149b8037caedfahttps://git.kernel.org/stable/c/930f0aaba4820d6362de4e6ed569eaf444f1ea4ehttps://git.kernel.org/stable/c/b549acf999824d4f751ca57965700372f2f3ad00https://git.kernel.org/stable/c/bb83f79f90e92f46466adcfd4fd264a7ae0f0f01https://git.kernel.org/stable/c/f6fe7261b92b21109678747f36df9fdab1e30c34https://git.kernel.org/stable/c/442fd24d7b6b29e4a9cd9225afba4142d5f522bahttps://git.kernel.org/stable/c/4df105f0ce9f6f30cda4e99f577150d23f0c9c5fhttps://git.kernel.org/stable/c/56d78b5495ebecbb9395101f3be177cd0a52450bhttps://git.kernel.org/stable/c/6b9ecf4e1032e645873933e5b43cbb84cac19106https://git.kernel.org/stable/c/77072ec41d6ab3718c3fc639bc149b8037caedfahttps://git.kernel.org/stable/c/930f0aaba4820d6362de4e6ed569eaf444f1ea4ehttps://git.kernel.org/stable/c/b549acf999824d4f751ca57965700372f2f3ad00https://git.kernel.org/stable/c/bb83f79f90e92f46466adcfd4fd264a7ae0f0f01https://git.kernel.org/stable/c/f6fe7261b92b21109678747f36df9fdab1e30c34
2024-05-21
Published