Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-43413

In the Linux kernel, the following vulnerability has been resolved: scsi: hisi_sas: Fix NULL pointer exception during user_scan() user_scan() invokes updated sas_user_scan() for channel 0, and if successful, iteratively scans remaining channels (1 to shost->max_channel) via scsi_scan_host_selected() in commit 37c4e72b0651 ("scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans"). However, hisi_sas supports only one channel, and the current value of max_channel is 1. sas_user_sca
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:70653d022a4f298eb7b3ee2502d37b572a7f2833bc97cbd03de10ee1e25b5be6
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/scsi/hisi_sas/hisi_sas_main.c","drivers/scsi/hisi_sas/hisi_sas_v3_hw.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.13"},{"lessThan":"4.13","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.130","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.78","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:012a6b2471c916be27cc3fa050794acfc8be1dc515a04ebf5debe410c021ce54 · sha256:16e94967703b2a46… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/scsi/hisi_sas/hisi_sas_main.c","drivers/scsi/hisi_sas/hisi_sas_v3_hw.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"70c78429ef383e35f9c58848994aeeac8083ae35","status":"affected","version":"e21fe3a52692f554efd67957c772c702de627a3a","versionType":"git"},{"lessThan":"40119a21d9769bf8fdab5c93c6c878296e628abf","status":"affected","version":"e21fe3a52692f554efd67957c772c702de627a3a","versionType":"git"},{"lessThan":"21a13db8d449b9c7eda4471da7f12417602dbbc7…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:012a6b2471c916be27cc3fa050794acfc8be1dc515a04ebf5debe410c021ce54 · sha256:16e94967703b2a46… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/scsi/hisi_sas/hisi_sas_main.c","drivers/scsi/hisi_sas/hisi_sas_v3_hw.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.13"},{"lessThan":"4.13","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.130","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.78","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:012a6b2471c916be27cc3fa050794acfc8be1dc515a04ebf5debe410c021ce54 · sha256:16e94967703b2a46… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/scsi/hisi_sas/hisi_sas_main.c","drivers/scsi/hisi_sas/hisi_sas_v3_hw.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"70c78429ef383e35f9c58848994aeeac8083ae35","status":"affected","version":"e21fe3a52692f554efd67957c772c702de627a3a","versionType":"git"},{"lessThan":"40119a21d9769bf8fdab5c93c6c878296e628abf","status":"affected","version":"e21fe3a52692f554efd67957c772c702de627a3a","versionType":"git"},{"lessThan":"21a13db8d449b9c7eda4471da7f12417602dbbc7…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:012a6b2471c916be27cc3fa050794acfc8be1dc515a04ebf5debe410c021ce54 · sha256:16e94967703b2a46… · /containers/cna/affected/0

Source references

5 source assertions
{"url":"https://git.kernel.org/stable/c/21a13db8d449b9c7eda4471da7f12417602dbbc7"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:012a6b2471c916be27cc3fa050794acfc8be1dc515a04ebf5debe410c021ce54 · sha256:16e94967703b2a46… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/40119a21d9769bf8fdab5c93c6c878296e628abf"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:012a6b2471c916be27cc3fa050794acfc8be1dc515a04ebf5debe410c021ce54 · sha256:16e94967703b2a46… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/70c78429ef383e35f9c58848994aeeac8083ae35"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:012a6b2471c916be27cc3fa050794acfc8be1dc515a04ebf5debe410c021ce54 · sha256:16e94967703b2a46… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/8ddc0c26916574395447ebf4cff684314f6873a9"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:012a6b2471c916be27cc3fa050794acfc8be1dc515a04ebf5debe410c021ce54 · sha256:16e94967703b2a46… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/beadac156610a4f3bb15cb7bb4b07b6ac06f6567"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:012a6b2471c916be27cc3fa050794acfc8be1dc515a04ebf5debe410c021ce54 · sha256:16e94967703b2a46… · /containers/cna/references/3

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer