Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's SCSI lpfc driver has been addressed. The issue arose in the function lpfc_sli4_cgn_params_read(), where the failure of the memory allocation function kzalloc() was not properly handled. Instead of returning an appropriate error code, the function relied on lpfc_read_object() to check for null pointers, which could lead to a null pointer dereference. The original error code of -ENODEV has been changed to -ENOMEM to reflect the memory allocation error more accurately.
The vulnerability could potentially lead to improper error handling and memory management, causing confusion in the error reporting process.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.