-
CVE-2025-68745
- EPSS 0.03%
- Veröffentlicht 24.12.2025 12:09:41
- Zuletzt bearbeitet 29.12.2025 15:58:13
- Quelle 416baaa9-dc9f-4396-8d5f-8c081f
- CVE-Watchlists
- Unerledigt
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Clear cmds after chip reset
Commit aefed3e5548f ("scsi: qla2xxx: target: Fix offline port handling
and host reset handling") caused two problems:
1. Commands sent to FW, after chip reset got stuck and never freed as FW
is not going to respond to them anymore.
2. BUG_ON(cmd->sg_mapped) in qlt_free_cmd(). Commit 26f9ce53817a
("scsi: qla2xxx: Fix missed DMA unmap for aborted commands")
attempted to fix this, but introduced another bug under different
circumstances when two different CPUs were racing to call
qlt_unmap_sg() at the same time: BUG_ON(!valid_dma_direction(dir)) in
dma_unmap_sg_attrs().
So revert "scsi: qla2xxx: Fix missed DMA unmap for aborted commands" and
partially revert "scsi: qla2xxx: target: Fix offline port handling and
host reset handling" at __qla2x00_abort_all_cmds.Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt
Linux
Default Statusunaffected
Version <
5c1fb3fd05da3d55b8cbc42d7d660b313cbdc936
Version
aefed3e5548f28e5fecafda6604fcbc65484dbaa
Status
affected
Version <
d46c69a087aa3d1513f7a78f871b80251ea0c1ae
Version
aefed3e5548f28e5fecafda6604fcbc65484dbaa
Status
affected
Version
eb67b7a23d357f578578e737cb6412ae2384f352
Status
affected
Version
ec9639d92c1e10d4bc667e842753d85e21683d5c
Status
affected
Version
e6e957f552d5b696879a31e5b0e2a9120e1ea86e
Status
affected
HerstellerLinux
≫
Produkt
Linux
Default Statusaffected
Version
5.2
Status
affected
Version <
5.2
Version
0
Status
unaffected
Version <=
6.18.*
Version
6.18.2
Status
unaffected
Version <=
*
Version
6.19-rc1
Status
unaffected
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.03% | 0.068 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|