CVE-2025-21723

scsi: mpi3mr: Fix possible crash when setting up bsg fails

State: Published
Severity: 5.5 Medium
Published: Feb 27, 2025
Updated: Oct 30, 2026
Reserved: Dec 29, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: mpi3mr: Fix possible crash when setting up bsg fails

If bsg_setup_queue() fails, the bsg_queue is assigned a non-NULL value. Consequently, in mpi3mr_bsg_exit(), the condition "if(!mrioc->bsg_queue)" will not be satisfied, preventing execution from entering bsg_remove_queue(), which could lead to the following crash:

BUG: kernel NULL pointer dereference, address: 000000000000041c Call Trace: <TASK> mpi3mr_bsg_exit+0x1f/0x50 [mpi3mr] mpi3mr_remove+0x6f/0x340 [mpi3mr] pci_device_remove+0x3f/0xb0 device_release_driver_internal+0x19d/0x220 unbind_store+0xa4/0xb0 kernfs_fop_write_iter+0x11f/0x200 vfs_write+0x1fc/0x3e0 ksys_write+0x67/0xe0 do_syscall_64+0x38/0x80 entry_SYSCALL_64_after_hwframe+0x78/0xe2

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	4268fa7513655a83d5492705591fdac6c65db48a to before 1ee558f98d9e247210e2301e19cc6e605778d4f1Affected 4268fa7513655a83d5492705591fdac6c65db48a to before bf66ec718e68767f6d463617adaf021963678803Affected 4268fa7513655a83d5492705591fdac6c65db48a to before 19b248069d1b1424982723a2bf3941ad864d5204Affected 4268fa7513655a83d5492705591fdac6c65db48a to before 832b8f95a2832321b8200ae478ed988b25faaef4Affected 4268fa7513655a83d5492705591fdac6c65db48a to before 295006f6e8c17212d3098811166e29627d19e05cAffected
LinuxLinux	5.19Affected before 5.19Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.13 through 6.12.Not affected 6.13.2 through 6.13.Not affected 6.14 and laterNot affected

Product

Versions

LinuxLinux

4268fa7513655a83d5492705591fdac6c65db48a to before 1ee558f98d9e247210e2301e19cc6e605778d4f1Affected
4268fa7513655a83d5492705591fdac6c65db48a to before bf66ec718e68767f6d463617adaf021963678803Affected
4268fa7513655a83d5492705591fdac6c65db48a to before 19b248069d1b1424982723a2bf3941ad864d5204Affected
4268fa7513655a83d5492705591fdac6c65db48a to before 832b8f95a2832321b8200ae478ed988b25faaef4Affected
4268fa7513655a83d5492705591fdac6c65db48a to before 295006f6e8c17212d3098811166e29627d19e05cAffected

LinuxLinux

5.19Affected
before 5.19Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.13 through 6.12.*Not affected
6.13.2 through 6.13.*Not affected
6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.