CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection
In the Linux kernel, the following vulnerability has been resolved:
scsi: target: iscsi: Fix timeout on deleted connection
NOPIN response timer may expire on a deleted connection and crash with such logs:
Did not receive response to NOPIN on CID: 0, failing connection for IT Nexus (null),i,0x00023d000125,iqn.2017-01.com.iscsi.target,t,0x3d
BUG: Kernel NULL pointer dereference on read at 0x00000000 NIP strlcpy+0x8/0xb0 LR iscsitfillcxntimeouterrstats+0x5c/0xc0 [iscsitargetmod] Call Trace: iscsithandlenopinresponsetimeout+0xfc/0x120 [iscsitargetmod] calltimerfn+0x58/0x1f0 runtimersoftirq+0x740/0x860 dosoftirq+0x16c/0x420 irqexit+0x188/0x1c0 timerinterrupt+0x184/0x410
That is because nopin response timer may be re-started on nopin timer expiration.
Stop nopin timer before stopping the nopin response timer to be sure that no one of them will be re-started.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38075?
CVE-2025-38075 has a severity rating that indicates potential risk for systems using vulnerable versions of the Linux kernel.
How do I fix CVE-2025-38075?
To fix CVE-2025-38075, update to the patched version of the Linux kernel that addresses this vulnerability.
What operating systems are affected by CVE-2025-38075?
CVE-2025-38075 affects versions of the Linux kernel that support SCSI target over iSCSI connections.
What are the symptoms of CVE-2025-38075 in affected systems?
Systems may experience crashes due to timeout on deleted connections, potentially leading to service interruptions.
Is there a workaround for CVE-2025-38075 while waiting for a patch?
There are no official workarounds for CVE-2025-38075; applying the latest patch is recommended to mitigate the issue.