-

CVE-2025-39676

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla4xxx: Prevent a potential error pointer dereference

The qla4xxx_get_ep_fwdb() function is supposed to return NULL on error,
but qla4xxx_ep_connect() returns error pointers.  Propagating the error
pointers will lead to an Oops in the caller, so change the error pointers
to NULL.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
VendorLinux
≫
Product Linux
Default Statusunaffected
Version < d0225f41ee70611ca88ccb22c8542ecdfa7faea8
Version 13483730a13bef372894aefcf73760f5c6c297be
Status affected
Version < ad8a9d38d30c691a77c456e72b78f7932d4f234d
Version 13483730a13bef372894aefcf73760f5c6c297be
Status affected
Version < 325bf7d57c4e2a341e381c5805e454fb69dd78c3
Version 13483730a13bef372894aefcf73760f5c6c297be
Status affected
Version < 46288d12d1c30d08fbeffd05abc079f57a43a2d4
Version 13483730a13bef372894aefcf73760f5c6c297be
Status affected
Version < f5ad0819f902b4b33591791b92a0350fb3692a6b
Version 13483730a13bef372894aefcf73760f5c6c297be
Status affected
Version < f1424c830d6ce840341aac33fe99c8ac45447ac1
Version 13483730a13bef372894aefcf73760f5c6c297be
Status affected
Version < f4bc3cdfe95115191e24592bbfc15f1d4a705a75
Version 13483730a13bef372894aefcf73760f5c6c297be
Status affected
Version < 9dcf111dd3e7ed5fce82bb108e3a3fc001c07225
Version 13483730a13bef372894aefcf73760f5c6c297be
Status affected
VendorLinux
≫
Product Linux
Default Statusaffected
Version 3.2
Status affected
Version < 3.2
Version 0
Status unaffected
Version <= 5.4.*
Version 5.4.297
Status unaffected
Version <= 5.10.*
Version 5.10.241
Status unaffected
Version <= 5.15.*
Version 5.15.190
Status unaffected
Version <= 6.1.*
Version 6.1.149
Status unaffected
Version <= 6.6.*
Version 6.6.103
Status unaffected
Version <= 6.12.*
Version 6.12.44
Status unaffected
Version <= 6.16.*
Version 6.16.4
Status unaffected
Version <= *
Version 6.17-rc3
Status unaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.04% 0.092
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string