CVE-2025-38695: scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
In the Linux kernel, the following vulnerability has been resolved:
scsi: lpfc: Check for hdwq null ptr when cleaning up lpfcvport structure
If a call to lpfcsli4readrev() from lpfcsli4hbasetup() fails, the resultant cleanup routine lpfcsli4vportdeletefcpxriaborted() may occur before sli4hba.hdwqs are allocated. This may result in a null pointer dereference when attempting to take the abtsiobuflistlock for the first hardware queue. Fix by adding a null ptr check on phba->sli4hba.hdwq and early return because this situation means there must have been an error during port initialization.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1 - Compensating control
Add a null-pointer check for phba->sli4_hba.hdwq in the lpfc_sli4_vport_delete_fcp_xri_aborted() cleanup path and return early when it is null, because this indicates an error during port initialization.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38695?
CVE-2025-38695 has been classified as a medium severity vulnerability.
What systems are affected by CVE-2025-38695?
CVE-2025-38695 affects Microsoft azl3 kernel versions 6.6.96.2-1 and 6.6.96.2-2.
How do I fix CVE-2025-38695?
To fix CVE-2025-38695, upgrade to the latest version of the Microsoft azl3 kernel.
What specific issue does CVE-2025-38695 address?
CVE-2025-38695 addresses a null pointer dereference in the lpfc_vport structure during cleanup.
Is there a patch available for CVE-2025-38695?
Yes, a patch for CVE-2025-38695 is included in the newer versions of the affected kernel.