From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id E7E9E1AA1F4 for ; Mon, 8 Dec 2025 01:20:03 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=10.30.226.201 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1765156804; cv=none; b=LC1hdrSg/yeH/scIDOVRQBJ/EhHHU65igtYbTqKSGXscBrURsXw5t5VXSPtKc7ZH84XGjnQ+7NeWkr+frd8dQscCwdaPs7wwRKtVDci4jIz/rqmRcJizb/ZACgf8GO83+sG20yjrhaGlfLyoICRqnA+PNFTIIV6FYx+T4Bdh0Mw= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1765156804; c=relaxed/simple; bh=QDOXINvJ2d/vyWuP5OAp5yghENl4Kvp95E6X8JqDues=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=XtCy/U4zfig/ELeTLcU076G3kgKxuPWR4LlT3EHiOqqVbC0WY0utLDUO3d3zpWo+66ubk9pVC4MPid152D+P8MXZmRO6YJgeC+Qc+xunrZ2CBw5UKt/sBr+hDOiyuS/vlNU5Rf6r9F3bVcWC0y4/QWNnCHoANvzBfDGHJ0xDFbU= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b=tMHsOfd3; arc=none smtp.client-ip=10.30.226.201 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b="tMHsOfd3" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 38AB7C16AAE; Mon, 8 Dec 2025 01:20:03 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=linuxfoundation.org; s=korg; t=1765156803; bh=QDOXINvJ2d/vyWuP5OAp5yghENl4Kvp95E6X8JqDues=; h=From:To:Cc:Subject:Date:Reply-To:From; b=tMHsOfd3tIokhBLtT9KjVZiRBOu4ifDpFE00dEgnpVZ9qXbCQiY6wSn8iqoDr0/XC SsmTETEyonhPPsbuMznsPZMsY00izxTUfNCSKvf7bsIUq4JOJn/bKgf4ITQcSgrgou Eiz0X3XLEXz15Vy+zp5PsgIZx4jlh1S8LBqmn/Oo= From: Greg Kroah-Hartman To: linux-cve-announce@vger.kernel.org Cc: Greg Kroah-Hartman Subject: CVE-2023-53754: scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() Date: Mon, 8 Dec 2025 10:19:53 +0900 Message-ID: <2025120843-CVE-2023-53754-c601@gregkh> X-Mailer: git-send-email 2.52.0 Reply-To: , Precedence: bulk X-Mailing-List: linux-cve-announce@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 X-Developer-Signature: v=1; a=openpgp-sha256; l=3457; i=gregkh@linuxfoundation.org; h=from:subject:message-id; bh=Nv7oqmA0XcTRhWqXvu2BohNJQPQmjOwTDE6zGUOT30g=; b=owGbwMvMwCRo6H6F97bub03G02pJDJlm6uvbl+SJHP9wetM0FlP9E7N7q/OK8v+eNZsVLrDte 31q87TCjlgWBkEmBlkxRZYv23iO7q84pOhlaHsaZg4rE8gQBi5OAZiI2XmGBZeuWX7V32VjqyV6 8qyZiLUSV13nEoYF2+OrFzR9XKok90RebXsbl7bKi7A2AA== X-Developer-Key: i=gregkh@linuxfoundation.org; a=openpgp; fpr=F4B60CC5BF78C2214A313DCB3147D40DDB2DFB29 Content-Transfer-Encoding: 8bit From: Greg Kroah-Hartman Description =========== In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() When if_type equals zero and pci_resource_start(pdev, PCI_64BIT_BAR4) returns false, drbl_regs_memmap_p is not remapped. This passes a NULL pointer to iounmap(), which can trigger a WARN() on certain arches. When if_type equals six and pci_resource_start(pdev, PCI_64BIT_BAR4) returns true, drbl_regs_memmap_p may has been remapped and ctrl_regs_memmap_p is not remapped. This is a resource leak and passes a NULL pointer to iounmap(). To fix these issues, we need to add null checks before iounmap(), and change some goto labels. The Linux kernel CVE team has assigned CVE-2023-53754 to this issue. Affected and fixed versions =========================== Issue introduced in 4.17 with commit 1351e69fc6db30e186295f1c9495d03cef6a01a2 and fixed in 5.4.243 with commit 74d90f92eafe8ccd12827228236a28a94eda6bcc Issue introduced in 4.17 with commit 1351e69fc6db30e186295f1c9495d03cef6a01a2 and fixed in 5.10.180 with commit bab8dc38b1a0a12bc064fc064269033bdcf5b88e Issue introduced in 4.17 with commit 1351e69fc6db30e186295f1c9495d03cef6a01a2 and fixed in 5.15.111 with commit fd8c83d8375b9dac1949f2753485a5c055ebfad0 Issue introduced in 4.17 with commit 1351e69fc6db30e186295f1c9495d03cef6a01a2 and fixed in 6.1.28 with commit e6f1ef4a53856ed000b0f7265d7e16dcb00f4243 Issue introduced in 4.17 with commit 1351e69fc6db30e186295f1c9495d03cef6a01a2 and fixed in 6.2.15 with commit 631d0fab143bef85ea0813596f1dda36e2b9724c Issue introduced in 4.17 with commit 1351e69fc6db30e186295f1c9495d03cef6a01a2 and fixed in 6.3.2 with commit 7e5a54d1f00725a739dcd20f616d82eff4f764bd Issue introduced in 4.17 with commit 1351e69fc6db30e186295f1c9495d03cef6a01a2 and fixed in 6.4 with commit 91a0c0c1413239d0548b5aac4c82f38f6d53a91e Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2023-53754 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: drivers/scsi/lpfc/lpfc_init.c Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/74d90f92eafe8ccd12827228236a28a94eda6bcc https://git.kernel.org/stable/c/bab8dc38b1a0a12bc064fc064269033bdcf5b88e https://git.kernel.org/stable/c/fd8c83d8375b9dac1949f2753485a5c055ebfad0 https://git.kernel.org/stable/c/e6f1ef4a53856ed000b0f7265d7e16dcb00f4243 https://git.kernel.org/stable/c/631d0fab143bef85ea0813596f1dda36e2b9724c https://git.kernel.org/stable/c/7e5a54d1f00725a739dcd20f616d82eff4f764bd https://git.kernel.org/stable/c/91a0c0c1413239d0548b5aac4c82f38f6d53a91e