Linux Kernel SCSI QLA2XXX Driver Null Pointer Dereference Vulnerability

A vulnerability in the Linux kernel's SCSI QLA2XXX driver could lead to a null pointer dereference. The issue arises because the function 'fc_bsg_to_rport()' may return a null value, which is not properly checked before being dereferenced. This flaw was highlighted by a Klocwork static analysis warning.

Impact

Exploitation of this vulnerability can cause a null pointer dereference, leading to a kernel crash.

Reproduction

The vulnerability can be reproduced by sending a Fibre Channel Block Storage Group (BSG) job that requests an ELS (Extended Link Service) message. The 'fc_bsg_to_rport()' function will be called to retrieve the corresponding remote port (rport). If the rport is null, it will trigger a memory allocation error and cause the function to exit prematurely, but without proper handling, this could lead to a crash.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed.