In the Linux kernel, the following vulnerability has been resolved:
scsi: libiscsi: Initialize iscsiconn->dddata only if memory is allocated
In case of an ibfastregmr allocation failure during iSER setup, the machine hits a panic because iscsiconn->dddata is initialized unconditionally, even when no memory is allocated (ddsize == 0). This leads invalid pointer dereference during connection teardown.
Fix by setting iscsiconn->dddata only if memory is actually allocated.
iser: isercreatefastregdesc: Failed to allocate ibfastregmr err=-12 iser: iserallocrxdescriptors: failed allocating rx descriptors / data buffers BUG: unable to handle page fault for address: fffffffffffffff8 RIP: 0010:swakeuplocked.part.5+0xa/0x40 Call Trace: complete+0x31/0x40 iscsiiserconnstop+0x88/0xb0 [ibiser] iscsistopconn+0x66/0xc0 [scsitransportiscsi] iscsiifstopconn+0x14a/0x150 [scsitransportiscsi] iscsiifrx+0x1135/0x1834 [scsitransportiscsi] ? netlinklookup+0x12f/0x1b0 ? netlinkdelivertap+0x2c/0x200 netlinkunicast+0x1ab/0x280 netlinksendmsg+0x257/0x4f0 ? _copyfromuser+0x29/0x60 socksendmsg+0x5f/0x70
[
{
"deprecated": false,
"id": "CVE-2025-38700-0a812efa",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35782c32528d82aa21f84cb5ceb2abd3526a8159",
"signature_version": "v1",
"target": {
"file": "drivers/scsi/libiscsi.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"327320801438458258226172355767927572919",
"122378403241285990907313985819906961021",
"62135071238944401008252929196651733480",
"49003419533170083357782340184504011276"
]
}
},
{
"deprecated": false,
"id": "CVE-2025-38700-1001031d",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2b242ea14386a510010eabfbfc3ce81a101f3802",
"signature_version": "v1",
"target": {
"file": "drivers/scsi/libiscsi.c",
"function": "iscsi_conn_setup"
},
"digest": {
"function_hash": "226700222443362974718664164809614789406",
"length": 1462.0
}
},
{
"deprecated": false,
"id": "CVE-2025-38700-11a4d952",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9ea6d961566c7d762ed0204b06db05756fdda3b6",
"signature_version": "v1",
"target": {
"file": "drivers/scsi/libiscsi.c",
"function": "iscsi_conn_setup"
},
"digest": {
"function_hash": "214994707122435717748306139022660840154",
"length": 1389.0
}
},
{
"deprecated": false,
"id": "CVE-2025-38700-1f15b159",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9ea6d961566c7d762ed0204b06db05756fdda3b6",
"signature_version": "v1",
"target": {
"file": "drivers/scsi/libiscsi.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"50846470880685700873758845263940041711",
"203165110872065520647752901859280855360",
"209454453027527589503893217703269244144",
"49003419533170083357782340184504011276"
]
}
},
{
"deprecated": false,
"id": "CVE-2025-38700-2651d770",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@66a373f50b4249d57f5a88c7be9676f9d5884865",
"signature_version": "v1",
"target": {
"file": "drivers/scsi/libiscsi.c",
"function": "iscsi_conn_setup"
},
"digest": {
"function_hash": "226700222443362974718664164809614789406",
"length": 1462.0
}
},
{
"deprecated": false,
"id": "CVE-2025-38700-28e9f58f",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a33d42b7fc24fe03f239fbb0880dd5b4b4b97c19",
"signature_version": "v1",
"target": {
"file": "drivers/scsi/libiscsi.c",
"function": "iscsi_conn_setup"
},
"digest": {
"function_hash": "226700222443362974718664164809614789406",
"length": 1462.0
}
},
{
"deprecated": false,
"id": "CVE-2025-38700-2a7eb83d",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3ea3a256ed81f95ab0f3281a0e234b01a9cae605",
"signature_version": "v1",
"target": {
"file": "drivers/scsi/libiscsi.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"327320801438458258226172355767927572919",
"122378403241285990907313985819906961021",
"62135071238944401008252929196651733480",
"49003419533170083357782340184504011276"
]
}
},
{
"deprecated": false,
"id": "CVE-2025-38700-3033774f",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a145c269dc5380c063a20a0db7e6df2995962e9d",
"signature_version": "v1",
"target": {
"file": "drivers/scsi/libiscsi.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"327320801438458258226172355767927572919",
"122378403241285990907313985819906961021",
"62135071238944401008252929196651733480",
"49003419533170083357782340184504011276"
]
}
},
{
"deprecated": false,
"id": "CVE-2025-38700-75d59939",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a145c269dc5380c063a20a0db7e6df2995962e9d",
"signature_version": "v1",
"target": {
"file": "drivers/scsi/libiscsi.c",
"function": "iscsi_conn_setup"
},
"digest": {
"function_hash": "226700222443362974718664164809614789406",
"length": 1462.0
}
},
{
"deprecated": false,
"id": "CVE-2025-38700-8892bb52",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35782c32528d82aa21f84cb5ceb2abd3526a8159",
"signature_version": "v1",
"target": {
"file": "drivers/scsi/libiscsi.c",
"function": "iscsi_conn_setup"
},
"digest": {
"function_hash": "226700222443362974718664164809614789406",
"length": 1462.0
}
},
{
"deprecated": false,
"id": "CVE-2025-38700-9e360535",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@66a373f50b4249d57f5a88c7be9676f9d5884865",
"signature_version": "v1",
"target": {
"file": "drivers/scsi/libiscsi.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"327320801438458258226172355767927572919",
"122378403241285990907313985819906961021",
"62135071238944401008252929196651733480",
"49003419533170083357782340184504011276"
]
}
},
{
"deprecated": false,
"id": "CVE-2025-38700-a3c0de80",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a33d42b7fc24fe03f239fbb0880dd5b4b4b97c19",
"signature_version": "v1",
"target": {
"file": "drivers/scsi/libiscsi.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"327320801438458258226172355767927572919",
"122378403241285990907313985819906961021",
"62135071238944401008252929196651733480",
"49003419533170083357782340184504011276"
]
}
},
{
"deprecated": false,
"id": "CVE-2025-38700-c01b0f28",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f53af99f441ee79599d8df6113a7144d74cf9153",
"signature_version": "v1",
"target": {
"file": "drivers/scsi/libiscsi.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"50846470880685700873758845263940041711",
"203165110872065520647752901859280855360",
"209454453027527589503893217703269244144",
"49003419533170083357782340184504011276"
]
}
},
{
"deprecated": false,
"id": "CVE-2025-38700-c4e8c776",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3ea3a256ed81f95ab0f3281a0e234b01a9cae605",
"signature_version": "v1",
"target": {
"file": "drivers/scsi/libiscsi.c",
"function": "iscsi_conn_setup"
},
"digest": {
"function_hash": "226700222443362974718664164809614789406",
"length": 1462.0
}
},
{
"deprecated": false,
"id": "CVE-2025-38700-ee0b588f",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f53af99f441ee79599d8df6113a7144d74cf9153",
"signature_version": "v1",
"target": {
"file": "drivers/scsi/libiscsi.c",
"function": "iscsi_conn_setup"
},
"digest": {
"function_hash": "214994707122435717748306139022660840154",
"length": 1389.0
}
},
{
"deprecated": false,
"id": "CVE-2025-38700-f79c710c",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2b242ea14386a510010eabfbfc3ce81a101f3802",
"signature_version": "v1",
"target": {
"file": "drivers/scsi/libiscsi.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"327320801438458258226172355767927572919",
"122378403241285990907313985819906961021",
"62135071238944401008252929196651733480",
"49003419533170083357782340184504011276"
]
}
}
]