CVE-2025-21723

MediumCVSS 5.5/10Last modified Oct 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: mpi3mr: Fix possible crash when setting up bsg fails

If bsg_setup_queue() fails, the bsg_queue is assigned a non-NULL value. Consequently, in mpi3mr_bsg_exit(), the condition "if(!mrioc->bsg_queue)" will not be satisfied, preventing execution from entering bsg_remove_queue(), which could lead to the following crash:

BUG: kernel NULL pointer dereference, address: 000000000000041c Call Trace: <TASK> mpi3mr_bsg_exit+0x1f/0x50 [mpi3mr] mpi3mr_remove+0x6f/0x340 [mpi3mr] pci_device_remove+0x3f/0xb0 device_release_driver_internal+0x19d/0x220 unbind_store+0xa4/0xb0 kernfs_fop_write_iter+0x11f/0x200 vfs_write+0x1fc/0x3e0 ksys_write+0x67/0xe0 do_syscall_64+0x38/0x80 entry_SYSCALL_64_after_hwframe+0x78/0xe2

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= 4268fa7513655a83d5492705591fdac6c65db48a, < 1ee558f98d9e247210e2301e19cc6e605778d4f1; >= 4268fa7513655a83d5492705591fdac6c65db48a, < bf66ec718e68767f6d463617adaf021963678803; >= 4268fa7513655a83d5492705591fdac6c65db48a, < 19b248069d1b1424982723a2bf3941ad864d5204; >= 4268fa7513655a83d5492705591fdac6c65db48a, < 832b8f95a2832321b8200ae478ed988b25faaef4; >= 4268fa7513655a83d5492705591fdac6c65db48a, < 295006f6e8c17212d3098811166e29627d19e05c
LinuxLinux5.19

References

Timeline

Published
Feb 27, 2025
Last modified
Oct 30, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-217247.8In the Linux kernel, the following vulnerability has been resolved: iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_iCVE-2025-217255.5In the Linux kernel, the following vulnerability has been resolved: smb: client: fix oops due to unset link speed It isn't guaranteed thatCVE-2025-217267.8In the Linux kernel, the following vulnerability has been resolved: padata: avoid UAF for reorder_work Although the previous patch can avoCVE-2025-217277.8In the Linux kernel, the following vulnerability has been resolved: padata: fix UAF in padata_reorder A bug was found when run ltp test: CVE-2025-217285.5In the Linux kernel, the following vulnerability has been resolved: bpf: Send signals asynchronously if !preemptible BPF programs can execCVE-2025-217297.8In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion ThCVE-2025-21737.5A vulnerability was found in libzvbi up to 0.2.43. It has been classified as problematic. Affected is the function vbi_strndup_iconv_ucs2 ofCVE-2025-217305.5In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: avoid to init mgnt_entry list twice when WoWLAN failed IfCVE-2025-217317.8In the Linux kernel, the following vulnerability has been resolved: nbd: don't allow reconnect after disconnect Following process can causCVE-2025-217324.7In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error ThisCVE-2025-217335.5In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Fix resetting of tracepoints If a timerlat tracer is CVE-2025-217347.8In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix copy buffer page size For non-registered buffer, fa
CVE-2025-21723: Medium severity, CVSS 5.5 | Vulnix