Skip to content
Heist/ feed
Back to feed
UnratedFix available

scsi: lpfc: Fix a possible null pointer dereference

Type: advisorySources: OSV

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix a possible null pointer dereference In function lpfc_xcvr_data_show, the memory allocation with kmalloc might fail, thereby making rdp_context a null pointer. In the following context and functions that use this pointer, there are dereferencing operations, leading to null pointer dereference. To fix this issue, a null pointer check should be added. If it is null, use scnprintf to notify the user and return len.

Products
Kernel
Affected versions
Not specified
Fixed versions
6.10.3, 6.6.44
CVEs
CVE-2024-43821
Confirmed fixed CVEs
Not specified
Updated in this feed
5 Nov 2026, 04:24 UTC · Revision 1

Source evidence

scsi: lpfc: Fix a possible null pointer dereference

core-osv · Original source

Published 17 Aug 2024, 09:21 UTC

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix a possible null pointer dereference In function lpfc_xcvr_data_show, the memory allocation with kmalloc might fail, thereby making rdp_context a null pointer. In the following context and functions that use this pointer, there are dereferencing operations, leading to null pointer dereference. To fix this issue, a null pointer check should be added. If it is null, use scnprintf to notify the user and return len.

osv:CVE-2024-43821

Kernel

Fixed versions: 6.6.44, 6.10.3

Complete source record
{
  "id": "6581b04b189d945c791c6a001707e4608fc9dd71ac9178a851f8cc3e084e21b1",
  "url": "https://osv.dev/vulnerability/CVE-2024-43821",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "scsi: lpfc: Fix a possible null pointer dereference",
    "summary": "In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix a possible null pointer dereference In function lpfc_xcvr_data_show, the memory allocation with kmalloc might fail, thereby making rdp_context a null pointer. In the following context and functions that use this pointer, there are dereferencing operations, leading to null pointer dereference. To fix this issue, a null pointer check should be added. If it is null, use scnprintf to notify the user and return len.",
    "evidence": "osv:CVE-2024-43821",
    "products": [
      {
        "name": {
          "value": "Kernel",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "6.6.44",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.10.3",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "CVE-2024-43821",
      "aliases": [
        "CVE-2024-43821"
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "479b0917e4477f49df2e3be454aac3cfa5dec171"
                },
                {
                  "fixed": "57600a7dd2b52c904f7c8d2cac0fd8c23868e680"
                },
                {
                  "fixed": "45b2a23e00d448a9e6d1f371ca3a4d4b073fe78c"
                },
                {
                  "fixed": "5e0bf3e8aec2cbc51123f84b29aaacbd91fc56fa"
                }
              ]
            }
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-43821.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.2.0"
                },
                {
                  "fixed": "6.6.44"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.7.0"
                },
                {
                  "fixed": "6.10.3"
                }
              ]
            }
          ],
          "package": {
            "name": "Kernel",
            "ecosystem": "Linux"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-43821.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:42.723532113Z",
      "provider": "osv",
      "references": [
        "https://git.kernel.org/stable/c/45b2a23e00d448a9e6d1f371ca3a4d4b073fe78c",
        "https://git.kernel.org/stable/c/57600a7dd2b52c904f7c8d2cac0fd8c23868e680",
        "https://git.kernel.org/stable/c/5e0bf3e8aec2cbc51123f84b29aaacbd91fc56fa",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/43xxx/CVE-2024-43821.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2024-43821",
        "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
      ],
      "provider_metadata": {
        "cna_assigner": "Linux",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/43xxx/CVE-2024-43821.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2024-43821",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 510242,
  "published_at": "2024-08-17T09:21:42.343+00:00"
}