In the Linux kernel, the following vulnerability has been resolved:
scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
If a call to lpfcsli4readrev() from lpfcsli4hbasetup() fails, the resultant cleanup routine lpfcsli4vportdeletefcpxriaborted() may occur before sli4hba.hdwqs are allocated. This may result in a null pointer dereference when attempting to take the abtsiobuflistlock for the first hardware queue. Fix by adding a null ptr check on phba->sli4hba.hdwq and early return because this situation means there must have been an error during port initialization.
[
{
"id": "CVE-2025-38695-19fac097",
"target": {
"function": "lpfc_sli4_vport_delete_fcp_xri_aborted",
"file": "drivers/scsi/lpfc/lpfc_scsi.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 728.0,
"function_hash": "37177237599085101386901317742934249165"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6698796282e828733cde3329c887b4ae9e5545e9"
},
{
"id": "CVE-2025-38695-1da14d50",
"target": {
"file": "drivers/scsi/lpfc/lpfc_scsi.c"
},
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"line_hashes": [
"278474544082634213335282133034407467891",
"103329580971664790830453000568097834492",
"261689672156069720524585137904739605458"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@571617f171f723b05f02d154a2e549a17eab4935"
},
{
"id": "CVE-2025-38695-215376af",
"target": {
"file": "drivers/scsi/lpfc/lpfc_scsi.c"
},
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"line_hashes": [
"278474544082634213335282133034407467891",
"103329580971664790830453000568097834492",
"261689672156069720524585137904739605458"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5e25ee1ecec91c61a8acf938ad338399cad464de"
},
{
"id": "CVE-2025-38695-218beb42",
"target": {
"function": "lpfc_sli4_vport_delete_fcp_xri_aborted",
"file": "drivers/scsi/lpfc/lpfc_scsi.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 730.0,
"function_hash": "273706881509057696724231778944319362999"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6711ce7e9de4eb1a541ef30638df1294ea4267f8"
},
{
"id": "CVE-2025-38695-2d937b77",
"target": {
"function": "lpfc_sli4_vport_delete_fcp_xri_aborted",
"file": "drivers/scsi/lpfc/lpfc_scsi.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 728.0,
"function_hash": "37177237599085101386901317742934249165"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@46a0602c24d7d425dd8e00c749cd64a934aac7ec"
},
{
"id": "CVE-2025-38695-34a002a3",
"target": {
"file": "drivers/scsi/lpfc/lpfc_scsi.c"
},
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"line_hashes": [
"278474544082634213335282133034407467891",
"103329580971664790830453000568097834492",
"261689672156069720524585137904739605458"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@46a0602c24d7d425dd8e00c749cd64a934aac7ec"
},
{
"id": "CVE-2025-38695-43335f1e",
"target": {
"function": "lpfc_sli4_vport_delete_fcp_xri_aborted",
"file": "drivers/scsi/lpfc/lpfc_scsi.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 728.0,
"function_hash": "37177237599085101386901317742934249165"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7925dd68807cc8fd755b04ca99e7e6f1c04392e8"
},
{
"id": "CVE-2025-38695-4c78b0b0",
"target": {
"function": "lpfc_sli4_vport_delete_fcp_xri_aborted",
"file": "drivers/scsi/lpfc/lpfc_scsi.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 728.0,
"function_hash": "37177237599085101386901317742934249165"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@571617f171f723b05f02d154a2e549a17eab4935"
},
{
"id": "CVE-2025-38695-4e3a5837",
"target": {
"file": "drivers/scsi/lpfc/lpfc_scsi.c"
},
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"line_hashes": [
"278474544082634213335282133034407467891",
"103329580971664790830453000568097834492",
"261689672156069720524585137904739605458"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7925dd68807cc8fd755b04ca99e7e6f1c04392e8"
},
{
"id": "CVE-2025-38695-5f7ce3a2",
"target": {
"function": "lpfc_sli4_vport_delete_fcp_xri_aborted",
"file": "drivers/scsi/lpfc/lpfc_scsi.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 729.0,
"function_hash": "162536273718068694674529496969175413567"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5e25ee1ecec91c61a8acf938ad338399cad464de"
},
{
"id": "CVE-2025-38695-6e2ea17a",
"target": {
"file": "drivers/scsi/lpfc/lpfc_scsi.c"
},
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"line_hashes": [
"278474544082634213335282133034407467891",
"103329580971664790830453000568097834492",
"261689672156069720524585137904739605458"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6698796282e828733cde3329c887b4ae9e5545e9"
},
{
"id": "CVE-2025-38695-6e822803",
"target": {
"file": "drivers/scsi/lpfc/lpfc_scsi.c"
},
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"line_hashes": [
"278474544082634213335282133034407467891",
"103329580971664790830453000568097834492",
"261689672156069720524585137904739605458"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6711ce7e9de4eb1a541ef30638df1294ea4267f8"
},
{
"id": "CVE-2025-38695-7b52e5dd",
"target": {
"function": "lpfc_sli4_vport_delete_fcp_xri_aborted",
"file": "drivers/scsi/lpfc/lpfc_scsi.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 728.0,
"function_hash": "37177237599085101386901317742934249165"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d3f55f46bb37a8ec73bfe3cfe36e3ecfa2945dfa"
},
{
"id": "CVE-2025-38695-a0d3667f",
"target": {
"file": "drivers/scsi/lpfc/lpfc_scsi.c"
},
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"line_hashes": [
"278474544082634213335282133034407467891",
"103329580971664790830453000568097834492",
"261689672156069720524585137904739605458"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74bdf54a847dab209d2a8f65852f59b7fa156175"
},
{
"id": "CVE-2025-38695-e0879c48",
"target": {
"function": "lpfc_sli4_vport_delete_fcp_xri_aborted",
"file": "drivers/scsi/lpfc/lpfc_scsi.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 729.0,
"function_hash": "162536273718068694674529496969175413567"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74bdf54a847dab209d2a8f65852f59b7fa156175"
},
{
"id": "CVE-2025-38695-e84043ee",
"target": {
"file": "drivers/scsi/lpfc/lpfc_scsi.c"
},
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"line_hashes": [
"278474544082634213335282133034407467891",
"103329580971664790830453000568097834492",
"261689672156069720524585137904739605458"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d3f55f46bb37a8ec73bfe3cfe36e3ecfa2945dfa"
}
]