Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2025-68745

Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
24/12/2025
Última modificación:
24/12/2025

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> scsi: qla2xxx: Clear cmds after chip reset<br /> <br /> Commit aefed3e5548f ("scsi: qla2xxx: target: Fix offline port handling<br /> and host reset handling") caused two problems:<br /> <br /> 1. Commands sent to FW, after chip reset got stuck and never freed as FW<br /> is not going to respond to them anymore.<br /> <br /> 2. BUG_ON(cmd-&gt;sg_mapped) in qlt_free_cmd(). Commit 26f9ce53817a<br /> ("scsi: qla2xxx: Fix missed DMA unmap for aborted commands")<br /> attempted to fix this, but introduced another bug under different<br /> circumstances when two different CPUs were racing to call<br /> qlt_unmap_sg() at the same time: BUG_ON(!valid_dma_direction(dir)) in<br /> dma_unmap_sg_attrs().<br /> <br /> So revert "scsi: qla2xxx: Fix missed DMA unmap for aborted commands" and<br /> partially revert "scsi: qla2xxx: target: Fix offline port handling and<br /> host reset handling" at __qla2x00_abort_all_cmds.

Impacto