AZL-74400
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-74400.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-74400
- Upstream
- Published
- 2026-01-13T16:16:06Z
- Modified
- 2026-04-01T05:22:43.219256Z
- Summary
- CVE-2025-71075 affecting package kernel for versions less than 6.6.121.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
scsi: aic94xx: fix use-after-free in device removal path
The asdpciremove() function fails to synchronize with pending tasklets before freeing the asd_ha structure, leading to a potential use-after-free vulnerability.
When a device removal is triggered (via hot-unplug or module unload), race condition can occur.
The fix adds taskletkill() before freeing the asdha structure, ensuring all scheduled tasklets complete before cleanup proceeds.
- References