CVE-2025-38699

scsi: bfa: Double-free fix

State: Published
Severity: Not scored
Published: Sep 4, 2025
Updated: May 12, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: bfa: Double-free fix

When the bfad_im_probe() function fails during initialization, the memory pointed to by bfad->im is freed without setting bfad->im to NULL.

Subsequently, during driver uninstallation, when the state machine enters the bfad_sm_stopping state and calls the bfad_im_probe_undo() function, it attempts to free the memory pointed to by bfad->im again, thereby triggering a double-free vulnerability.

Set bfad->im to NULL if probing fails.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	7725ccfda59715ecf8f99e3b520a0b84cc2ea79e to before 684c92bb08a25ed3c0356bc7eb532ed5b19588ddAffected 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e to before 9337c2affbaebe00b75fdf84ea0e2fcf93c140afAffected 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e to before ba024d92564580bb90ec367248ace8efe16ce815Affected 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e to before 8e03dd9fadf76db5b9799583074a1a2a54f787f1Affected 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e to before 39cfe2c83146aad956318f866d0ee471b7a61fa5Affected 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e to before 13f613228cf3c96a038424cd97aa4d6aadc66294Affected 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e to before 8456f862cb95bcc3a831e1ba87c0c17068be0f3fAffected 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e to before 50d9bd48321038bd6e15af5a454bbcd180cf6f80Affected 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e to before add4c4850363d7c1b72e8fce9ccb21fdd2cf5dc9Affected
LinuxLinux	2.6.32Affected before 2.6.32Not affected 5.4.297 through 5.4.Not affected 5.10.241 through 5.10.Not affected 5.15.190 through 5.15.Not affected 6.1.149 through 6.1.Not affected 6.6.103 through 6.6.Not affected 6.12.43 through 6.12.Not affected 6.15.11 through 6.15.Not affected 6.16.2 through 6.16.Not affected 6.17 and laterNot affected

Product

Versions

LinuxLinux

7725ccfda59715ecf8f99e3b520a0b84cc2ea79e to before 684c92bb08a25ed3c0356bc7eb532ed5b19588ddAffected
7725ccfda59715ecf8f99e3b520a0b84cc2ea79e to before 9337c2affbaebe00b75fdf84ea0e2fcf93c140afAffected
7725ccfda59715ecf8f99e3b520a0b84cc2ea79e to before ba024d92564580bb90ec367248ace8efe16ce815Affected
7725ccfda59715ecf8f99e3b520a0b84cc2ea79e to before 8e03dd9fadf76db5b9799583074a1a2a54f787f1Affected
7725ccfda59715ecf8f99e3b520a0b84cc2ea79e to before 39cfe2c83146aad956318f866d0ee471b7a61fa5Affected
7725ccfda59715ecf8f99e3b520a0b84cc2ea79e to before 13f613228cf3c96a038424cd97aa4d6aadc66294Affected
7725ccfda59715ecf8f99e3b520a0b84cc2ea79e to before 8456f862cb95bcc3a831e1ba87c0c17068be0f3fAffected
7725ccfda59715ecf8f99e3b520a0b84cc2ea79e to before 50d9bd48321038bd6e15af5a454bbcd180cf6f80Affected
7725ccfda59715ecf8f99e3b520a0b84cc2ea79e to before add4c4850363d7c1b72e8fce9ccb21fdd2cf5dc9Affected

LinuxLinux

2.6.32Affected
before 2.6.32Not affected
5.4.297 through 5.4.*Not affected
5.10.241 through 5.10.*Not affected
5.15.190 through 5.15.*Not affected
6.1.149 through 6.1.*Not affected
6.6.103 through 6.6.*Not affected
6.12.43 through 6.12.*Not affected
6.15.11 through 6.15.*Not affected
6.16.2 through 6.16.*Not affected
6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.