-

CVE-2025-38289

In the Linux kernel, the following vulnerability has been resolved:

scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk

Smatch detected a potential use-after-free of an ndlp oject in
dev_loss_tmo_callbk during driver unload or fatal error handling.

Fix by reordering code to avoid potential use-after-free if initial
nodelist reference has been previously removed.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
VendorLinux
≫
Product Linux
Default Statusunaffected
Version < ea405fb4144985d5c60f49c2abd9ba47ea44fdb4
Version e4913d4bc59227fbdfe6b8f5541f49aaea1cb41c
Status affected
Version < 4f09940b5581e44069eb31a66cf7f05c3c35ed04
Version 4281f44ea8bfedd25938a0031bebba1473ece9ad
Status affected
Version < b5162bb6aa1ec04dff4509b025883524b6d7e7ca
Version 4281f44ea8bfedd25938a0031bebba1473ece9ad
Status affected
VendorLinux
≫
Product Linux
Default Statusaffected
Version 6.13
Status affected
Version < 6.13
Version 0
Status unaffected
Version <= 6.12.*
Version 6.12.37
Status unaffected
Version <= 6.15.*
Version 6.15.3
Status unaffected
Version <= *
Version 6.16
Status unaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.03% 0.074
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string