Linux Kernel lpfc Driver Null Pointer Dereference Vulnerability

A vulnerability in the Linux kernel's lpfc SCSI driver can lead to a null pointer dereference. This issue occurs in the 'lpfc_cmpl_ct_cmd_gft_id()' function when an error exit is handled. The function calls 'lpfc_nlp_put()' with a null pointer to a nodelist structure, which can cause a crash. The vulnerability has been addressed by modifying the function to properly initialize the nodelist pointer before it is used.

Impact

Exploitation of this vulnerability can cause a null pointer dereference, leading to a system crash.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the patched version are available on the official Linux kernel website.