CVE-2025-38238: scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out
In the Linux kernel, the following vulnerability has been resolved:
scsi: fnic: Fix crash in fnicwqcmplhandler when FDMI times out
When both the RHBA and RPA FDMI requests time out, fnic reuses a frame to send ABTS for each of them. On send completion, this causes an attempt to free the same frame twice that leads to a crash.
Fix crash by allocating separate frames for RHBA and RPA, and modify ABTS logic accordingly.
Tested by checking MDS for FDMI information.
Tested by using instrumented driver to:
- Drop PLOGI response - Drop RHBA response - Drop RPA response - Drop RHBA and RPA response - Drop PLOGI response + ABTS response - Drop RHBA response + ABTS response - Drop RPA response + ABTS response - Drop RHBA and RPA response + ABTS response for both of them
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Apply the kernel fix for "scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out" by allocating separate frames for the RHBA and RPA FDMI requests and modifying ABTS logic to send ABTS for each of them (instead of reusing a frame when FDMI requests time out).
Linux kernel scsi: fnic ABTS handling for FDMI requests (RHBA and RPA) = Send ABTS for each of them; allocate separate frames for RHBA and RPA
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38238?
CVE-2025-38238 is a high severity vulnerability in the Linux kernel affecting SCSI drivers.
How do I fix CVE-2025-38238?
To fix CVE-2025-38238, you should update to the latest version of the Linux kernel where the vulnerability has been resolved.
What are the potential impacts of CVE-2025-38238?
The potential impacts of CVE-2025-38238 include system crashes and potential data loss during SCSI operations.
Which versions of the Linux kernel are affected by CVE-2025-38238?
CVE-2025-38238 affects specific versions of the Linux kernel that handle SCSI FNIC operations, particularly those that have outdated handling of FDMI requests.
Is CVE-2025-38238 publicly known?
Yes, CVE-2025-38238 is a publicly known vulnerability listed in the National Vulnerability Database.