CVE-2025-71075

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> scsi: aic94xx: fix use-after-free in device removal path<br /> <br /> The asd_pci_remove() function fails to synchronize with pending tasklets<br /> before freeing the asd_ha structure, leading to a potential<br /> use-after-free vulnerability.<br /> <br /> When a device removal is triggered (via hot-unplug or module unload),<br /> race condition can occur.<br /> <br /> The fix adds tasklet_kill() before freeing the asd_ha structure,<br /> ensuring all scheduled tasklets complete before cleanup proceeds.