In the Linux kernel, the following vulnerability has been resolved:
scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
If lpfc_issue_els_flogi() fails and returns non-zero status, the node reference count is decremented to trigger the release of the nodelist structure. However, if there is a prior registration or dev-loss-evt work pending, the node may be released prematurely. When dev-loss-evt completes, the released node is referenced causing a use-after-free null pointer dereference.
Similarly, when processing non-zero ELS PLOGI completion status in lpfc_cmpl_els_plogi(), the ndlp flags are checked for a transport registration before triggering node removal. If dev-loss-evt work is pending, the node may be released prematurely and a subsequent call to lpfc_dev_loss_tmo_handler() results in a use after free ndlp dereference.
Add test for pending dev-loss before decrementing the node reference count for FLOGI, PLOGI, PRLI, and ADISC handling.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Feb 27, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade perfUpgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libs | May 13, 2025 | Feb 26, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libs | Jun 13, 2025 | Feb 26, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Jun 11, 2025 | Feb 26, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel | Jun 11, 2025 | Feb 26, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 26, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-kvm-5.15Upgrade linux-image-genericUpgrade linux-image-nvidia-tegraUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-realtime-5.15Upgrade linux-image-virtualUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-fips-5.15Upgrade linux-image-kvmUpgrade linux-image-oem-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-virtual-5.15Upgrade linux-image-intelUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-azure-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-oem-20.04bUpgrade linux-image-aws-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-5.15Upgrade linux-image-gkeUpgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-gkeopUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-raspi-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-azureUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-generic-5.15Upgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-gcp-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-lowlatency-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-realtimeUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-fipsUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oracleUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-ibm-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspiUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-aws-fipsUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-azure-cvmUpgrade linux-image-gcp-fipsUpgrade linux-image-azure-fipsUpgrade linux-image-generic-64k-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-raspi-nolpae | Jun 26, 2025 | Feb 26, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub