CVE-2023-53754
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() When if_type equals zero and pci_resource_start(pdev, PCI_64BIT_BAR4) returns false, drbl_regs_memmap_p is not remapped. This passes a NULL pointer to iounmap(), which can trigger a WARN() on certain arches. When if_type equals six and pci_resource_start(pdev, PCI_64BIT_BAR4) returns true, drbl_regs_memmap_p may has been remapped and ctrl_regs_memmap_p is not remapped. This is a resource leak and passes a NULL pointer to iounmap(). To fix these issues, we need to add null checks before iounmap(), and change some goto labels.
How to fix
- Linux Linux74d90f92eafe8ccd12827228236a28a94eda6bcc, bab8dc38b1a0a12bc064fc064269033bdcf5b88e, fd8c83d8375b9dac1949f2753485a5c055ebfad0, e6f1ef4a53856ed000b0f7265d7e16dcb00f4243, 631d0fab143bef85ea0813596f1dda36e2b9724c, 7e5a54d1f00725a739dcd20f616d82eff4f764bd, 91a0c0c1413239d0548b5aac4c82f38f6d53a91e or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 1351e69fc6db30e186295f1c9495d03cef6a01a2 ≤ v < 74d90f92eafe8ccd12827228236a28a94eda6bcc, 1351e69fc6db30e186295f1c9495d03cef6a01a2 ≤ v < bab8dc38b1a0a12bc064fc064269033bdcf5b88e, 1351e69fc6db30e186295f1c9495d03cef6a01a2 ≤ v < fd8c83d8375b9dac1949f2753485a5c055ebfad0, 1351e69fc6db30e186295f1c9495d03cef6a01a2 ≤ v < e6f1ef4a53856ed000b0f7265d7e16dcb00f4243, 1351e69fc6db30e186295f1c9495d03cef6a01a2 ≤ v < 631d0fab143bef85ea0813596f1dda36e2b9724c, 1351e69fc6db30e186295f1c9495d03cef6a01a2 ≤ v < 7e5a54d1f00725a739dcd20f616d82eff4f764bd, 1351e69fc6db30e186295f1c9495d03cef6a01a2 ≤ v < 91a0c0c1413239d0548b5aac4c82f38f6d53a91e, 4.17 | 74d90f92eafe8ccd12827228236a28a94eda6bcc, bab8dc38b1a0a12bc064fc064269033bdcf5b88e, fd8c83d8375b9dac1949f2753485a5c055ebfad0, e6f1ef4a53856ed000b0f7265d7e16dcb00f4243, 631d0fab143bef85ea0813596f1dda36e2b9724c, 7e5a54d1f00725a739dcd20f616d82eff4f764bd, 91a0c0c1413239d0548b5aac4c82f38f6d53a91e |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.