CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Fix improper freeing of purex item
In qla2xxxprocesspurlsiocb(), an item is allocated via qla27xxcopymultiplepkt(), which internally calls qla24xxallocpurexitem().
The qla24xxallocpurexitem() function may return a pre-allocated item from a per-adapter pool for small allocations, instead of dynamically allocating memory with kzalloc().
An error handling path in qla2xxxprocesspurlsiocb() incorrectly uses kfree() to release the item. If the item was from the pre-allocated pool, calling kfree() on it is a bug that can lead to memory corruption.
Fix this by using the correct deallocation function, qla24xxfreepurexitem(), which properly handles both dynamically allocated and pre-allocated items.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
scsi: qla2xxxto a version that resolves this vulnerability.Patch scsi: qla2xxx: Fix improper freeing of purex item
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68741?
CVE-2025-68741 has been classified as a medium severity vulnerability due to improper memory handling in the Linux kernel.
How do I fix CVE-2025-68741?
To fix CVE-2025-68741, users should update their Linux kernel to the latest patched version provided by their distribution.
What systems are affected by CVE-2025-68741?
CVE-2025-68741 affects the Linux kernel and specifically the Microsoft azl3 kernel version 6.6.117.1-1.
What is the impact of CVE-2025-68741 on affected systems?
The impact of CVE-2025-68741 can lead to potential crashes or instability in systems that improperly free memory items.
Who is responsible for addressing CVE-2025-68741?
The maintainers of the affected Linux kernel versions are responsible for releasing patches to address CVE-2025-68741.