CVE-2025-21723
Severity CVSS v4.0:
Pending analysis
Type:
CWE-476
NULL Pointer Dereference
Publication date:
27/02/2025
Last modified:
01/10/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
scsi: mpi3mr: Fix possible crash when setting up bsg fails<br />
<br />
If bsg_setup_queue() fails, the bsg_queue is assigned a non-NULL value.<br />
Consequently, in mpi3mr_bsg_exit(), the condition "if(!mrioc->bsg_queue)"<br />
will not be satisfied, preventing execution from entering<br />
bsg_remove_queue(), which could lead to the following crash:<br />
<br />
BUG: kernel NULL pointer dereference, address: 000000000000041c<br />
Call Trace:<br />
<br />
mpi3mr_bsg_exit+0x1f/0x50 [mpi3mr]<br />
mpi3mr_remove+0x6f/0x340 [mpi3mr]<br />
pci_device_remove+0x3f/0xb0<br />
device_release_driver_internal+0x19d/0x220<br />
unbind_store+0xa4/0xb0<br />
kernfs_fop_write_iter+0x11f/0x200<br />
vfs_write+0x1fc/0x3e0<br />
ksys_write+0x67/0xe0<br />
do_syscall_64+0x38/0x80<br />
entry_SYSCALL_64_after_hwframe+0x78/0xe2
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.19 (including) | 6.12.13 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.13 (including) | 6.13.2 (excluding) |
To consult the complete list of CPE names with products and versions, see this page



