Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2025-21957

scsi: qla1280: Fix kernel oops when debug level > 2

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: qla1280: Fix kernel oops when debug level > 2 A null dereference or oops exception will eventually occur when qla1280.c driver is compiled with DEBUG_QLA1280 enabled and ql_debug_level > 2. I think its clear from the code that the intention here is sg_dma_len(s) not length of sg_next(s) when printing the debug info.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • a0441891373fe2db582075a4639fdfcccea470c1 to < afa27b7c17a48e01546ccaad0ab017ad0496a522affected
  • a0441891373fe2db582075a4639fdfcccea470c1 to < 11a8dac1177a596648a020a7f3708257a2f95feeaffected
  • a0441891373fe2db582075a4639fdfcccea470c1 to < c737e2a5fb7f90b96a96121da1b50a9c74ae9b8caffected
  • a0441891373fe2db582075a4639fdfcccea470c1 to < 24602e2664c515a4f2950d7b52c3d5997463418caffected
  • a0441891373fe2db582075a4639fdfcccea470c1 to < ea371d1cdefb0951c7127a33bcd7eb931cf44571affected
  • a0441891373fe2db582075a4639fdfcccea470c1 to < af71ba921d08c241a817010f96458dc5e5e26762affected
  • a0441891373fe2db582075a4639fdfcccea470c1 to < 7ac2473e727d67a38266b2b7e55c752402ab588caffected
  • a0441891373fe2db582075a4639fdfcccea470c1 to < 5233e3235dec3065ccc632729675575dbe3c6b8aaffected

Linux Linux

Default version status: affected

  • 2.6.24affected
  • 0 to < 2.6.24unaffected
  • 5.4.292 to ≤ 5.4.*unaffected
  • 5.10.236 to ≤ 5.10.*unaffected
  • 5.15.180 to ≤ 5.15.*unaffected
  • 6.1.132 to ≤ 6.1.*unaffected
  • 6.6.84 to ≤ 6.6.*unaffected
  • 6.12.20 to ≤ 6.12.*unaffected
  • 6.13.8 to ≤ 6.13.*unaffected
  • 6.14 to ≤ *unaffected

References