{"id":"CVE-2023-53038","title":"scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read()\n\nIf kzalloc() fails in lpfc_sli4_cgn_params_read(), then we rely on\nlpfc_read_object()'s routine to NULL chec…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 72df8a452883b0be334396acba07df77c3c3f6c7 < 67b8343998b84418bc5b5206aa01fe9b461a80ef","Linux >= 72df8a452883b0be334396acba07df77c3c3f6c7 < 4829a1e1171536978b240a1438789c2e4d5c9715","Linux >= 72df8a452883b0be334396acba07df77c3c3f6c7 < 908dd9a0853a88155a5a36018c7e2b32ccf20379","Linux >= 72df8a452883b0be334396acba07df77c3c3f6c7 < 312320b0e0ec21249a17645683fe5304d796aec1","Linux 5.15"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T20:15:05.625660Z"},"published":"2025-05-02","updated":"2026-11-05","sourceUpdated":"2026-11-05T20:20:55.525Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2023-53038","references":[{"url":"https://git.kernel.org/stable/c/67b8343998b84418bc5b5206aa01fe9b461a80ef"},{"url":"https://git.kernel.org/stable/c/4829a1e1171536978b240a1438789c2e4d5c9715"},{"url":"https://git.kernel.org/stable/c/908dd9a0853a88155a5a36018c7e2b32ccf20379"},{"url":"https://git.kernel.org/stable/c/312320b0e0ec21249a17645683fe5304d796aec1"}],"tags":["cve.org"],"epss":0.00202,"epssPercentile":0.10242,"ingestedAt":"2026-11-05T22:38:31.755Z","slug":"CVE-2023-53038","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nscsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read()\n\nIf kzalloc() fails in lpfc_sli4_cgn_params_read(), then we rely on\nlpfc_read_object()'s routine to NULL check pdata.\n\nCurrently, an early return error is thrown from lpfc_read_object() to\nprotect us from NULL ptr dereference, but the errno code is -ENODEV.\n\nChange the errno code to a more appropriate -ENOMEM.\n\n## Affected\n\n- `Linux >= 72df8a452883b0be334396acba07df77c3c3f6c7 < 67b8343998b84418bc5b5206aa01fe9b461a80ef`\n- `Linux >= 72df8a452883b0be334396acba07df77c3c3f6c7 < 4829a1e1171536978b240a1438789c2e4d5c9715`\n- `Linux >= 72df8a452883b0be334396acba07df77c3c3f6c7 < 908dd9a0853a88155a5a36018c7e2b32ccf20379`\n- `Linux >= 72df8a452883b0be334396acba07df77c3c3f6c7 < 312320b0e0ec21249a17645683fe5304d796aec1`\n- `Linux 5.15`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}