Home

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure If a call to lpfc_sli4_read_rev() from lpfc_sli4_hba_setup() fails, the resultant cleanup routine lpfc_sli4_vport_delete_fcp_xri_aborted() may occur before sli4_hba.hdwqs are allocated. This may result in a null pointer dereference when attempting to take the abts_io_buf_list_lock for the first hardware queue. Fix by adding a null ptr check on phba->sli4_hba.hdwq and early return because this situation means there must have been an error during port initialization.

PUBLISHED Reserved 2025-04-16 | Published 2025-09-04 | Updated 2025-09-29 | Assigner Linux

Product status

Default status
unaffected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before 6711ce7e9de4eb1a541ef30638df1294ea4267f8
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before 74bdf54a847dab209d2a8f65852f59b7fa156175
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before 5e25ee1ecec91c61a8acf938ad338399cad464de
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before add68606a01dcccf18837a53e85b85caf0693b4b
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before 7925dd68807cc8fd755b04ca99e7e6f1c04392e8
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before 571617f171f723b05f02d154a2e549a17eab4935
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before d3f55f46bb37a8ec73bfe3cfe36e3ecfa2945dfa
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before 46a0602c24d7d425dd8e00c749cd64a934aac7ec
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before 6698796282e828733cde3329c887b4ae9e5545e9
affected

Default status
affected

5.4.297 (semver)
unaffected

5.10.241 (semver)
unaffected

5.15.190 (semver)
unaffected

6.1.149 (semver)
unaffected

6.6.103 (semver)
unaffected

6.12.43 (semver)
unaffected

6.15.11 (semver)
unaffected

6.16.2 (semver)
unaffected

6.17 (original_commit_for_fix)
unaffected

References

git.kernel.org/...c/6711ce7e9de4eb1a541ef30638df1294ea4267f8

git.kernel.org/...c/74bdf54a847dab209d2a8f65852f59b7fa156175

git.kernel.org/...c/5e25ee1ecec91c61a8acf938ad338399cad464de

git.kernel.org/...c/add68606a01dcccf18837a53e85b85caf0693b4b

git.kernel.org/...c/7925dd68807cc8fd755b04ca99e7e6f1c04392e8

git.kernel.org/...c/571617f171f723b05f02d154a2e549a17eab4935

git.kernel.org/...c/d3f55f46bb37a8ec73bfe3cfe36e3ecfa2945dfa

git.kernel.org/...c/46a0602c24d7d425dd8e00c749cd64a934aac7ec

git.kernel.org/...c/6698796282e828733cde3329c887b4ae9e5545e9

cve.org (CVE-2025-38695)

nvd.nist.gov (CVE-2025-38695)

Download JSON