CVE-2025-68745

CriticalCVSS 9.8/10Last modified Oct 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Clear cmds after chip reset

Commit aefed3e5548f ("scsi: qla2xxx: target: Fix offline port handling and host reset handling") caused two problems:

1. Commands sent to FW, after chip reset got stuck and never freed as FW is not going to respond to them anymore.

2. BUG_ON(cmd->sg_mapped) in qlt_free_cmd(). Commit 26f9ce53817a ("scsi: qla2xxx: Fix missed DMA unmap for aborted commands") attempted to fix this, but introduced another bug under different circumstances when two different CPUs were racing to call qlt_unmap_sg() at the same time: BUG_ON(!valid_dma_direction(dir)) in dma_unmap_sg_attrs().

So revert "scsi: qla2xxx: Fix missed DMA unmap for aborted commands" and partially revert "scsi: qla2xxx: target: Fix offline port handling and host reset handling" at __qla2x00_abort_all_cmds.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
LinuxLinux>= aefed3e5548f28e5fecafda6604fcbc65484dbaa, < e87e9f92d7735895b7dd97f53dce6d95d08cf29c; >= aefed3e5548f28e5fecafda6604fcbc65484dbaa, < 0d0a1a267c1ee7c41aeffdca84afcb113787a91a; >= aefed3e5548f28e5fecafda6604fcbc65484dbaa, < c82c0fbb97d0fd44324eb55ab758408c7c964b32; >= aefed3e5548f28e5fecafda6604fcbc65484dbaa, < 5c1fb3fd05da3d55b8cbc42d7d660b313cbdc936; >= aefed3e5548f28e5fecafda6604fcbc65484dbaa, < d46c69a087aa3d1513f7a78f871b80251ea0c1ae; eb67b7a23d357f578578e737cb6412ae2384f352; ec9639d92c1e10d4bc667e842753d85e21683d5c; e6e957f552d5b696879a31e5b0e2a9120e1ea86e; >= 4.9.316, < 4.10; >= 4.14.281, < 4.15; >= 4.19.245, < 4.20
LinuxLinux5.2

References

Timeline

Published
Dec 24, 2025
Last modified
Oct 30, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-687467.8In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Fix timeout handling When the CPU that the QSPI inCVE-2025-687477.8In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix UAF on kernel BO VA nodes If the MMU is down, panthorCVE-2025-687487.8In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix UAF race between device unplug and FW event processingCVE-2025-687494.7In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix race condition when unbinding BOs Fix 'Memory manager CVE-2025-68758.8A vulnerability has been found in SourceCodester Best Salon Management System 1.0 and classified as critical. Affected by this vulnerabilityCVE-2025-68750In the Linux kernel, the following vulnerability has been resolved: usb: potential integer overflow in usbg_make_tpg() The variable tpgt iCVE-2025-68751In the Linux kernel, the following vulnerability has been resolved: s390/fpu: Fix false-positive kmsan report in fpu_vstl() A false-positiCVE-2025-68752In the Linux kernel, the following vulnerability has been resolved: iavf: Implement settime64 with -EOPNOTSUPP ptp_clock_settime() assumesCVE-2025-687537.1In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: add bounds check in put_user loop for DSP events CVE-2025-68754In the Linux kernel, the following vulnerability has been resolved: rtc: amlogic-a4: fix double free caused by devm The clock obtained viaCVE-2025-68755In the Linux kernel, the following vulnerability has been resolved: staging: most: remove broken i2c driver The MOST I2C driver has been cCVE-2025-68756In the Linux kernel, the following vulnerability has been resolved: block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_
CVE-2025-68745: Critical severity, CVSS 9.8 | Vulnix