CVE-2023-53124 — scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()

Back Back to CVE browser

MEDIUM

scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()

Published May 2, 2025

5.5

MEDIUM

CVSS 3.1

EPSS 0.19%

Description

Port is allocated by sas_port_alloc_num() and rphy is allocated by either sas_end_device_alloc() or sas_expander_alloc(), all of which may return NULL. So we need to check the rphy to avoid possible NULL pointer access.

If sas_rphy_add() returned with failure, rphy is set to NULL. We would access the rphy in the following lines which would also result NULL pointer access.

Affected products

Vendor Linux Product Linux Default
unaffected
- Version
  5.10.163
  Status
  affected
  Constraints
  <5.10.176
- Version
  5.15.86
  Status
  affected
  Constraints
  <5.15.104
- Version
  5.4.229
  Status
  affected
  Constraints
  <5.4.238
- Version
  6.0.16
  Status
  affected
  Constraints
  <6.1
- Version
  6.1.2
  Status
  affected
  Constraints
  <6.1.21
Vendor Linux Product Linux Default
unaffected
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
  -
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
Vendor Linux Product Linux Default
affected
- Version
  6.2
  Status
  affected
  Constraints
  -
- Version
  0
  Status
  unaffected
  Constraints
  <6.2
- Version
  5.10.176
  Status
  unaffected
  Constraints
  <=5.10.*
- Version
  5.15.104
  Status
  unaffected
  Constraints
  <=5.15.*
- Version
  5.4.238
  Status
  unaffected
  Constraints
  <=5.4.*
- Version
  6.1.21
  Status
  unaffected
  Constraints
  <=6.1.*
- Version
  6.2.8
  Status
  unaffected
  Constraints
  <=6.2.*
- Version
  6.3
  Status
  unaffected
  Constraints
  <=*

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Linux

unaffected

Version	Status	Constraints
5.10.163	affected	<5.10.176
5.15.86	affected	<5.15.104
5.4.229	affected	<5.4.238
6.0.16	affected	<6.1
6.1.2	affected	<6.1.21

Linux

unaffected

Version	Status	Constraints
	affected
	affected	-
	affected
	affected
	affected
	affected
	affected

Linux

affected

Version	Status	Constraints
6.2	affected	-
0	unaffected	<6.2
5.10.176	unaffected	<=5.10.*
5.15.104	unaffected	<=5.15.*
5.4.238	unaffected	<=5.4.*
6.1.21	unaffected	<=6.1.*
6.2.8	unaffected	<=6.2.*
6.3	unaffected	<=*

Red Hat Enterprise Linux 8

kernel-0:4.18.0-513.5.1.el8_9

Fixed · RHSA-2023:7077
Red Hat Enterprise Linux 10

kernel

Not affected
Red Hat Enterprise Linux 6

kernel

Out of support scope
Red Hat Enterprise Linux 7

kernel

Out of support scope
Red Hat Enterprise Linux 7

kernel-rt

Out of support scope
Red Hat Enterprise Linux 8

kernel-rt

Out of support scope
Red Hat Enterprise Linux 9

kernel

Fix deferred
Red Hat Enterprise Linux 9

kernel-rt

Fix deferred

Product	Package	State	Advisory
Red Hat Enterprise Linux 8	kernel-0:4.18.0-513.5.1.el8_9	Fixed	RHSA-2023:7077
Red Hat Enterprise Linux 10	kernel	Not affected	n/a
Red Hat Enterprise Linux 6	kernel	Out of support scope	n/a
Red Hat Enterprise Linux 7	kernel	Out of support scope	n/a
Red Hat Enterprise Linux 7	kernel-rt	Out of support scope	n/a
Red Hat Enterprise Linux 8	kernel-rt	Out of support scope	n/a
Red Hat Enterprise Linux 9	kernel	Fix deferred	n/a
Red Hat Enterprise Linux 9	kernel-rt	Fix deferred	n/a

Remediation

No remediation recorded yet.

Metrics

0.19% 0.00189

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 2, 2026.

EPSS probability 0.00189

Score over time

2025–2026

EPSS v4
EPSS v5

Percentile over time

EPSS v4
EPSS v5

Table of values (3 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 2, 2026	0.19% (0.00189)	7.66th	v5 (v2026.06.15)
Jun 15, 2026	0.15% (0.00149)	4.40th	v5 (v2026.06.15)
May 3, 2025	0.02% (0.00024)	5.19th	v4 (v2025.03.14)

Weaknesses (1)

CWE-476

NULL Pointer Dereference

References (11)

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2023-53124		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2363714		Issue Tracking
https://git.kernel.org/stable/c/090305c36185c0547e4441d4c08f1cf096b32134		Patch
https://git.kernel.org/stable/c/6f0c2f70d9929208d8427ec72c3ed91e2251e289		Patch
https://git.kernel.org/stable/c/9937f784a608944107dcc2ba9a9c3333f8330b9e		Patch
https://git.kernel.org/stable/c/a26c775ccc4cfe46f9b718b51bd24313053c7e0b		Patch
https://git.kernel.org/stable/c/b5e5bbb3fa5f8412e96c5eda7f4a4af6241d6bd3		Patch
https://git.kernel.org/stable/c/d3c57724f1569311e4b81e98fad0931028b9bdcd		Patch
https://lore.kernel.org/linux-cve-announce/2025050232-CVE-2023-53124-9900@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2023-53124
https://www.cve.org/CVERecord?id=CVE-2023-53124