In the Linux kernel, the following vulnerability has been resolved:
scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort()
A race can occur between the MCQ completion path and the abort handler: once a request completes, __blk_mq_free_request() sets rq->mq_hctx to NULL, meaning the subsequent ufshcd_mcq_req_to_hwq() call in ufshcd_mcq_abort() can return a NULL pointer. If this NULL pointer is dereferenced, the kernel will crash.
Add a NULL check for the returned hwq pointer. If hwq is NULL, log an error and return FAILED, preventing a potential NULL-pointer dereference. As suggested by Bart, the ufshcd_cmd_inflight() check is removed.
This is similar to the fix in commit 74736103fb41 ("scsi: ufs: core: Fix ufshcd_abort_one racing issue").
This is found by our static analysis tool KNighter.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade kernel-64kb-extraUpgrade kernel-64kb-develUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-azure-vdsoUpgrade kernel-macrosUpgrade kernel-symsUpgrade kernel-obs-qaUpgrade kernel-default-livepatchUpgrade kernel-devel-azureUpgrade kernel-develUpgrade kernel-source-vanillaUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade kernel-default-vdsoUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-kvmsmallUpgrade kernel-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-develUpgrade kernel-kvmsmall-develUpgrade kernel-azureUpgrade kernel-zfcpdump | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-raspi-6.8Upgrade linux-image-gkeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-genericUpgrade linux-image-gke-6.8Upgrade linux-image-gkeopUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-realtimeUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-raspiUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-gcp-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-azure-fdeUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-fipsUpgrade linux-image-gke-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-aws-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-awsUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-aws-fipsUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-kvmUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-oracleUpgrade linux-image-azure-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-azure-fipsUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-gcp-6.8Upgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-nvidiaUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-oem-22.04aUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-xilinxUpgrade linux-image-oem-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-intel-iotgUpgrade linux-image-oracle-lts-24.04 | Jun 26, 2025 | May 8, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub