CVE-2023-53603

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2025-10-04 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Avoid fcport pointer dereference Klocwork reported warning of NULL pointer may be dereferenced. The routine exits when sa_ctl is NULL and fcport is allocated after the exit call thus causing NULL fcport pointer to dereference at the time of exit. To avoid fcport pointer dereference, exit the routine when sa_ctl is NULL.

Weakness Classification (1)

Affected Software (11)

VendorProductVersion
Linux Linux 7b2fbfa4b2cd3a24c1760b85d842e928070d4744 < 4406fe8a96a946c7ea5724ee59625755a1d9c59d
Linux Linux e0fb8ce2bb9e52c846e54ad2c58b5b7beb13eb09 < 477bc74ad1add644b606bff6ba1284943c42818a
Linux Linux e0fb8ce2bb9e52c846e54ad2c58b5b7beb13eb09 < 7bbeff613ec0560fb2f6f8b405288f3f043adf64
Linux Linux e0fb8ce2bb9e52c846e54ad2c58b5b7beb13eb09 < 6b504d06976fe4a61cc05dedc68b84fadb397f77
Linux Linux 47b583ad1f7e459689eb1bdd222279a6986ccd69
Linux Linux d2deafaef0330a863b5e046c1154b605588d19f7
Linux Linux 5.15.61 < 5.15.121
Linux Linux 5.18.18 < 5.19
Linux Linux 5.19.2 < 5.20
Linux Linux 6.0
linux linux_kernel 5.15.61 – 5.15.121

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.15%
Raw Score 0.001480
Percentile 4.1%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00148
2026-11-13
0.00148
2026-11-12
0.00148
2026-11-10
0.00148
2026-11-09
0.00148
2026-11-08
0.00148
2026-11-07
0.00148
2026-11-06
0.00148
2026-11-05
0.00148

Intelligence Sources

mitre ref →
nvd ref →