CVE-2025-38399

Source
https://nvd.nist.gov/vuln/detail/CVE-2025-38399
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38399.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-38399
Downstream
Related
Published
2025-07-25T13:15:29Z
Modified
2025-08-12T21:01:38Z
Summary
[none]
Details

In the Linux kernel, the following vulnerability has been resolved:

scsi: target: Fix NULL pointer dereference in corescsi3decodespeci_port()

The function corescsi3decodespeciport(), in its error code path, unconditionally calls corescsi3lunaclundependitem() passing the destse_deve pointer, which may be NULL.

This can lead to a NULL pointer dereference if destsedeve remains unset.

SPC-3 PR SPECIPT: Unable to locate desttpg Unable to handle kernel paging request at virtual address dfff800000000012 Call trace: corescsi3lunaclundependitem+0x2c/0xf0 [targetcoremod] (P) corescsi3decodespeciport+0x120c/0x1c30 [targetcoremod] corescsi3emulateproregister+0x6b8/0xcd8 [targetcoremod] targetscsi3emulateprout+0x56c/0x840 [targetcoremod]

Fix this by adding a NULL check before calling corescsi3lunaclundependitem()

References

Affected packages