Riskcovery

CVE-2025-68371

scsi: smartpqi: Fix device resources accessed after device removal

State
Published
Severity
Not scored
Published
Dec 24, 2025
Updated
Oct 15, 2026
Reserved
Dec 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: smartpqi: Fix device resources accessed after device removal

Correct possible race conditions during device removal.

Previously, a scheduled work item to reset a LUN could still execute after the device was removed, leading to use-after-free and other resource access issues.

This race condition occurs because the abort handler may schedule a LUN reset concurrently with device removal via sdev_destroy(), leading to use-after-free and improper access to freed resources.

- Check in the device reset handler if the device is still present in the controller's SCSI device list before running; if not, the reset is skipped.

- Cancel any pending TMF work that has not started in sdev_destroy().

- Ensure device freeing in sdev_destroy() is done while holding the LUN reset mutex to avoid races with ongoing resets.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 2d80f4054f7f901b8ad97358a9069616ac8524c7 to before 7dfa5a5516ec3c6b9b6c22ee18f0eb2df3f38ef2Affected
  • 2d80f4054f7f901b8ad97358a9069616ac8524c7 to before 6d2390653d82cad0e1ba2676e536dd99678f6ef1Affected
  • 2d80f4054f7f901b8ad97358a9069616ac8524c7 to before eccc02ba1747501d92bb2049e3ce378ba372f641Affected
  • 2d80f4054f7f901b8ad97358a9069616ac8524c7 to before 4e1acf1b6dd6dd0495bda139daafd7a403ae2dc1Affected
  • 2d80f4054f7f901b8ad97358a9069616ac8524c7 to before 1a5c5a2f88e839af5320216a02ffb075b668596aAffected
  • 2d80f4054f7f901b8ad97358a9069616ac8524c7 to before b518e86d1a70a88f6592a7c396cf1b93493d1aabAffected
LinuxLinux
  • 6.0Affected
  • before 6.0Not affected
  • 6.1.160 through 6.1.*Not affected
  • 6.6.120 through 6.6.*Not affected
  • 6.12.63 through 6.12.*Not affected
  • 6.17.13 through 6.17.*Not affected
  • 6.18.2 through 6.18.*Not affected
  • 6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.