Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-71075

scsi: aic94xx: fix use-after-free in device removal path

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: aic94xx: fix use-after-free in device removal path The asd_pci_remove() function fails to synchronize with pending tasklets before freeing the asd_ha structure, leading to a potential use-after-free vulnerability. When a device removal is triggered (via hot-unplug or module unload), race condition can occur. The fix adds tasklet_kill() before freeing the asd_ha structure, ensuring all scheduled tasklets complete before cleanup proceeds.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 2908d778ab3e244900c310974e1fc1c69066e450 to < c8f6f88cd1df35155258285c4f43268b361819dfaffected
  • 2908d778ab3e244900c310974e1fc1c69066e450 to < 278455a82245a572aeb218a6212a416a98e418deaffected
  • 2908d778ab3e244900c310974e1fc1c69066e450 to < b3e655e52b98a1d3df41c8e42035711e083099f8affected
  • 2908d778ab3e244900c310974e1fc1c69066e450 to < e354793a7ab9bb0934ea699a9d57bcd1b48fc27baffected
  • 2908d778ab3e244900c310974e1fc1c69066e450 to < a41dc180b6e1229ae49ca290ae14d82101c148c3affected
  • 2908d778ab3e244900c310974e1fc1c69066e450 to < 751c19635c2bfaaf2836a533caa3663633066dcfaffected
  • 2908d778ab3e244900c310974e1fc1c69066e450 to < f6ab594672d4cba08540919a4e6be2e202b60007affected

Linux Linux

Default version status: affected

  • 2.6.19affected
  • 0 to < 2.6.19unaffected
  • 5.10.248 to ≤ 5.10.*unaffected
  • 5.15.198 to ≤ 5.15.*unaffected
  • 6.1.160 to ≤ 6.1.*unaffected
  • 6.6.120 to ≤ 6.6.*unaffected
  • 6.12.64 to ≤ 6.12.*unaffected
  • 6.18.3 to ≤ 6.18.*unaffected
  • 6.19 to ≤ *unaffected

References