PT-2025-49484 · Linux+1 · Linux Kernel+1

Published

2025-12-08

·

Updated

2026-02-24

·

CVE-2023-53754

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contains an issue within the lpfc module related to memory mapping in the lpfc sli4 pci mem setup() function. Specifically, when if type is zero and pci resource start(pdev, PCI 64BIT BAR4) returns false, the drbl regs memmap p pointer is not remapped, leading to a potential null pointer dereference during an iounmap() call. Similarly, when if type is six and pci resource start(pdev, PCI 64BIT BAR4) returns true, drbl regs memmap p may be remapped while ctrl regs memmap p is not, resulting in a resource leak and a potential null pointer dereference during iounmap(). The issue is addressed by adding null checks before the iounmap() function and adjusting goto labels.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2023-53754
SUSE-SU-2026:0263-1
SUSE-SU-2026:0316-1
SUSE-SU-2026:0317-1
SUSE-SU-2026:0411-1
SUSE-SU-2026:0617-1

Affected Products

Linux Kernel
Lpfc