NULL Pointer Vulnerability in Linux Kernel Driver for SCSI

CVE-2026-43473

What is CVE-2026-43473?

A vulnerability exists within the Linux kernel's SCSI driver where NULL checks were missing during the cleanup process of reply and request queues. This flaw could result in a system crash if the driver attempts to access freed memory after failing to create these queues, leading to undefined behavior. Guidance has been provided to implement NULL pointer checks to prevent this condition, thus enhancing system stability and reliability during resource cleanup.

References