CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path
In the Linux kernel, the following vulnerability has been resolved:
scsi: aic94xx: fix use-after-free in device removal path
The asdpciremove() function fails to synchronize with pending tasklets before freeing the asdha structure, leading to a potential use-after-free vulnerability.
When a device removal is triggered (via hot-unplug or module unload), race condition can occur.
The fix adds taskletkill() before freeing the asdha structure, ensuring all scheduled tasklets complete before cleanup proceeds.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-71075?
CVE-2025-71075 has been classified as a moderate severity vulnerability due to its potential impact on system stability.
How do I fix CVE-2025-71075?
To fix CVE-2025-71075, update your Linux kernel to the latest version where the vulnerability has been patched.
What systems are affected by CVE-2025-71075?
CVE-2025-71075 affects systems using the aic94xx SCSI driver within the Linux kernel.
What type of vulnerability is CVE-2025-71075?
CVE-2025-71075 is a use-after-free vulnerability that occurs in the device removal path of the SCSI subsystem.
Can CVE-2025-71075 lead to unauthorized access?
While CVE-2025-71075 primarily affects system stability, it could potentially be exploited to execute arbitrary code under certain circumstances.