Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-38289

scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk Smatch detected a potential use-after-free of an ndlp oject in dev_loss_tmo_callbk during driver unload or fatal error handling. Fix by reordering code to avoid potential use-after-free if initial nodelist reference has been previously removed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • e4913d4bc59227fbdfe6b8f5541f49aaea1cb41c to < ea405fb4144985d5c60f49c2abd9ba47ea44fdb4affected
  • 4281f44ea8bfedd25938a0031bebba1473ece9ad to < 4f09940b5581e44069eb31a66cf7f05c3c35ed04affected
  • 4281f44ea8bfedd25938a0031bebba1473ece9ad to < b5162bb6aa1ec04dff4509b025883524b6d7e7caaffected
  • 6.12.5 to < 6.12.37affected

Linux Linux

Default version status: affected

  • 6.13affected
  • 0 to < 6.13unaffected
  • 6.12.37 to ≤ 6.12.*unaffected
  • 6.15.3 to ≤ 6.15.*unaffected
  • 6.16 to ≤ *unaffected

References