Skip to content
Heist/ feed
Unrated

scsi: qla2xxx: Free sp in error path to fix system crash

Type: advisorySource: Official CVE List1 source record

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Free sp in error path to fix system crash System crash seen during load/unload test in a loop, [61110.449331] qla2xxx [0000:27:00.0]-0042:0: Disabled MSI-X. [61110.467494] ============================================================================= [61110.467498] BUG qla2xxx_srbs (Tainted: G OE -------- --- ): Objects remaining in qla2xxx_srbs on __kmem_cache_shutdown() [61110.467501] ----------------------------------------------------------------------------- [61110.467502] Slab 0x000000000ffc8162 objects=51 used=1 fp=0x00000000e25d3d85 flags=0x57ffffc0010200(slab|head|node=1|zone=2|lastcpupid=0x1fffff) [61110.467509] CPU: 53 PID: 455206 Comm: rmmod Kdump: loaded Tainted: G OE -------- --- 5.14.0-284.11.1.el9_2.x86_64 #1 [61110.467513] Hardware name: HPE ProLiant DL385 Gen10 Plus v2/ProLiant DL385 Gen10 Plus v2, BIOS A42 08/17/2023 [61110.467515] Call Trace: [61110.467516] [61110.467519] dump_stack_lvl+0x34/0x48 [61110.467526] slab_err.cold+0x53/0x67 [61110.467534] __kmem_cache_shutdown+0x16e/0x320 [61110.467540] kmem_cache_destroy+0x51/0x160 [61110.467544] qla2x00_module_exit+0x93/0x99 [qla2xxx] [61110.467607] ? __do_sys_delete_module.constprop.0+0x178/0x280 [61110.467613] ? syscall_trace_enter.constprop.0+0x145/0x1d0 [61110.467616] ? do_syscall_64+0x5c/0x90 [61110.467619] ? exc_page_fault+0x62/0x150 [61110.467622] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [61110.467626] [61110.467627] Dis

Announced Group revision 1
Original source ↗

CVE-2025-71232

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2025-71232

Linux

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Linux

Source reference: /containers/cna/affected/1/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "f352eeb75419d2b693df7cc5957f7427c2b9b3ea",
        "lessThan": "b410ab8b9431d6d63d04caa1d69909fcc8b25eae",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "f352eeb75419d2b693df7cc5957f7427c2b9b3ea",
        "lessThan": "b74408de1f2264220979f0c6a5a9d5e50b5b534b",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "f352eeb75419d2b693df7cc5957f7427c2b9b3ea",
        "lessThan": "8e7597b4efee6143439641bc6522f247d585e060",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "f352eeb75419d2b693df7cc5957f7427c2b9b3ea",
        "lessThan": "aed16d37696f494288a291b4b477484ed0be774b",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "f352eeb75419d2b693df7cc5957f7427c2b9b3ea",
        "lessThan": "05fcd590e5fbbb3e9e1b4fc6c23c98a1d38cf256",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "f352eeb75419d2b693df7cc5957f7427c2b9b3ea",
        "lessThan": "f04840512438ac025dea6e357d80a986b28bbe4c",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "f352eeb75419d2b693df7cc5957f7427c2b9b3ea",
        "lessThan": "19ac050ef09a2f0a9d9787540f77bb45cf9033e8",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "f352eeb75419d2b693df7cc5957f7427c2b9b3ea",
        "lessThan": "7adbd2b7809066c75f0433e5e2a8e114b429f30f",
        "versionType": "git"
      }
    ],
    "programFiles": [
      "drivers/scsi/qla2xxx/qla_gs.c"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "4.16"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "4.16",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "5.10.251",
        "versionType": "semver",
        "lessThanOrEqual": "5.10.*"
      },
      {
        "status": "unaffected",
        "version": "5.15.201",
        "versionType": "semver",
        "lessThanOrEqual": "5.15.*"
      },
      {
        "status": "unaffected",
        "version": "6.1.164",
        "versionType": "semver",
        "lessThanOrEqual": "6.1.*"
      },
      {
        "status": "unaffected",
        "version": "6.6.125",
        "versionType": "semver",
        "lessThanOrEqual": "6.6.*"
      },
      {
        "status": "unaffected",
        "version": "6.12.72",
        "versionType": "semver",
        "lessThanOrEqual": "6.12.*"
      },
      {
        "status": "unaffected",
        "version": "6.18.11",
        "versionType": "semver",
        "lessThanOrEqual": "6.18.*"
      },
      {
        "status": "unaffected",
        "version": "6.19.1",
        "versionType": "semver",
        "lessThanOrEqual": "6.19.*"
      },
      {
        "status": "unaffected",
        "version": "7.0",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "drivers/scsi/qla2xxx/qla_gs.c"
    ],
    "defaultStatus": "affected"
  }
]
Related CVEs
CVE-2025-71232

Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event
#39179 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement