In the Linux kernel, the following vulnerability has been resolved:
scsi: bfa: Double-free fix
When the bfadimprobe() function fails during initialization, the memory pointed to by bfad->im is freed without setting bfad->im to NULL.
Subsequently, during driver uninstallation, when the state machine enters the bfadsmstopping state and calls the bfadimprobe_undo() function, it attempts to free the memory pointed to by bfad->im again, thereby triggering a double-free vulnerability.
Set bfad->im to NULL if probing fails.
[
{
"id": "CVE-2025-38699-2d19ebaf",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "bfad_im_probe",
"file": "drivers/scsi/bfa/bfad_im.c"
},
"digest": {
"length": 379.0,
"function_hash": "320442970485099577465984650101455968924"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@add4c4850363d7c1b72e8fce9ccb21fdd2cf5dc9",
"deprecated": false
},
{
"id": "CVE-2025-38699-366160d5",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "bfad_im_probe",
"file": "drivers/scsi/bfa/bfad_im.c"
},
"digest": {
"length": 379.0,
"function_hash": "320442970485099577465984650101455968924"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@50d9bd48321038bd6e15af5a454bbcd180cf6f80",
"deprecated": false
},
{
"id": "CVE-2025-38699-4b9fecbf",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/scsi/bfa/bfad_im.c"
},
"digest": {
"line_hashes": [
"34467394565843670992105139169063076427",
"67782400438249745417024385491148795699",
"66830945166333746216694012174229789524",
"63009413790144616587713328780257977864"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@684c92bb08a25ed3c0356bc7eb532ed5b19588dd",
"deprecated": false
},
{
"id": "CVE-2025-38699-5ebae053",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "bfad_im_probe",
"file": "drivers/scsi/bfa/bfad_im.c"
},
"digest": {
"length": 379.0,
"function_hash": "320442970485099577465984650101455968924"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8456f862cb95bcc3a831e1ba87c0c17068be0f3f",
"deprecated": false
},
{
"id": "CVE-2025-38699-92e05f98",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/scsi/bfa/bfad_im.c"
},
"digest": {
"line_hashes": [
"34467394565843670992105139169063076427",
"67782400438249745417024385491148795699",
"66830945166333746216694012174229789524",
"63009413790144616587713328780257977864"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8456f862cb95bcc3a831e1ba87c0c17068be0f3f",
"deprecated": false
},
{
"id": "CVE-2025-38699-9347b3e5",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/scsi/bfa/bfad_im.c"
},
"digest": {
"line_hashes": [
"34467394565843670992105139169063076427",
"67782400438249745417024385491148795699",
"66830945166333746216694012174229789524",
"63009413790144616587713328780257977864"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@50d9bd48321038bd6e15af5a454bbcd180cf6f80",
"deprecated": false
},
{
"id": "CVE-2025-38699-9e3fa874",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "bfad_im_probe",
"file": "drivers/scsi/bfa/bfad_im.c"
},
"digest": {
"length": 379.0,
"function_hash": "320442970485099577465984650101455968924"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e03dd9fadf76db5b9799583074a1a2a54f787f1",
"deprecated": false
},
{
"id": "CVE-2025-38699-a119ce5a",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "bfad_im_probe",
"file": "drivers/scsi/bfa/bfad_im.c"
},
"digest": {
"length": 379.0,
"function_hash": "320442970485099577465984650101455968924"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9337c2affbaebe00b75fdf84ea0e2fcf93c140af",
"deprecated": false
},
{
"id": "CVE-2025-38699-aafbe66b",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/scsi/bfa/bfad_im.c"
},
"digest": {
"line_hashes": [
"34467394565843670992105139169063076427",
"67782400438249745417024385491148795699",
"66830945166333746216694012174229789524",
"63009413790144616587713328780257977864"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ba024d92564580bb90ec367248ace8efe16ce815",
"deprecated": false
},
{
"id": "CVE-2025-38699-b65e0f5d",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/scsi/bfa/bfad_im.c"
},
"digest": {
"line_hashes": [
"34467394565843670992105139169063076427",
"67782400438249745417024385491148795699",
"66830945166333746216694012174229789524",
"63009413790144616587713328780257977864"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39cfe2c83146aad956318f866d0ee471b7a61fa5",
"deprecated": false
},
{
"id": "CVE-2025-38699-be2b91a3",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/scsi/bfa/bfad_im.c"
},
"digest": {
"line_hashes": [
"34467394565843670992105139169063076427",
"67782400438249745417024385491148795699",
"66830945166333746216694012174229789524",
"63009413790144616587713328780257977864"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e03dd9fadf76db5b9799583074a1a2a54f787f1",
"deprecated": false
},
{
"id": "CVE-2025-38699-bf778773",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/scsi/bfa/bfad_im.c"
},
"digest": {
"line_hashes": [
"34467394565843670992105139169063076427",
"67782400438249745417024385491148795699",
"66830945166333746216694012174229789524",
"63009413790144616587713328780257977864"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@add4c4850363d7c1b72e8fce9ccb21fdd2cf5dc9",
"deprecated": false
},
{
"id": "CVE-2025-38699-df2e5de4",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/scsi/bfa/bfad_im.c"
},
"digest": {
"line_hashes": [
"34467394565843670992105139169063076427",
"67782400438249745417024385491148795699",
"66830945166333746216694012174229789524",
"63009413790144616587713328780257977864"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@13f613228cf3c96a038424cd97aa4d6aadc66294",
"deprecated": false
},
{
"id": "CVE-2025-38699-f047b00b",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "bfad_im_probe",
"file": "drivers/scsi/bfa/bfad_im.c"
},
"digest": {
"length": 379.0,
"function_hash": "320442970485099577465984650101455968924"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39cfe2c83146aad956318f866d0ee471b7a61fa5",
"deprecated": false
},
{
"id": "CVE-2025-38699-f57ca3fc",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "bfad_im_probe",
"file": "drivers/scsi/bfa/bfad_im.c"
},
"digest": {
"length": 379.0,
"function_hash": "320442970485099577465984650101455968924"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@13f613228cf3c96a038424cd97aa4d6aadc66294",
"deprecated": false
},
{
"id": "CVE-2025-38699-f69bee3b",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/scsi/bfa/bfad_im.c"
},
"digest": {
"line_hashes": [
"34467394565843670992105139169063076427",
"67782400438249745417024385491148795699",
"66830945166333746216694012174229789524",
"63009413790144616587713328780257977864"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9337c2affbaebe00b75fdf84ea0e2fcf93c140af",
"deprecated": false
},
{
"id": "CVE-2025-38699-f92a8ac1",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "bfad_im_probe",
"file": "drivers/scsi/bfa/bfad_im.c"
},
"digest": {
"length": 379.0,
"function_hash": "320442970485099577465984650101455968924"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ba024d92564580bb90ec367248ace8efe16ce815",
"deprecated": false
},
{
"id": "CVE-2025-38699-fa157e04",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "bfad_im_probe",
"file": "drivers/scsi/bfa/bfad_im.c"
},
"digest": {
"length": 379.0,
"function_hash": "320442970485099577465984650101455968924"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@684c92bb08a25ed3c0356bc7eb532ed5b19588dd",
"deprecated": false
}
]