CVE-2025-71232
- Source
- https://cve.org/CVERecord?id=CVE-2025-71232
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-71232.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2025-71232
- Downstream
- Published
- 2026-02-18T14:53:16.709Z
- Modified
- 2026-02-23T19:37:54.422064Z
- Summary
- scsi: qla2xxx: Free sp in error path to fix system crash
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Free sp in error path to fix system crash
System crash seen during load/unload test in a loop,
[61110.449331] qla2xxx [0000:27:00.0]-0042:0: Disabled MSI-X. [61110.467494] ============================================================================= [61110.467498] BUG qla2xxxsrbs (Tainted: G OE -------- --- ): Objects remaining in qla2xxxsrbs on _kmemcache_shutdown() [61110.467501] -----------------------------------------------------------------------------
[61110.467502] Slab 0x000000000ffc8162 objects=51 used=1 fp=0x00000000e25d3d85 flags=0x57ffffc0010200(slab|head|node=1|zone=2|lastcpupid=0x1fffff) [61110.467509] CPU: 53 PID: 455206 Comm: rmmod Kdump: loaded Tainted: G OE -------- --- 5.14.0-284.11.1.el92.x8664 #1 [61110.467513] Hardware name: HPE ProLiant DL385 Gen10 Plus v2/ProLiant DL385 Gen10 Plus v2, BIOS A42 08/17/2023 [61110.467515] Call Trace: [61110.467516] <TASK> [61110.467519] dumpstacklvl+0x34/0x48 [61110.467526] slaberr.cold+0x53/0x67 [61110.467534] _kmemcacheshutdown+0x16e/0x320 [61110.467540] kmemcachedestroy+0x51/0x160 [61110.467544] qla2x00moduleexit+0x93/0x99 [qla2xxx] [61110.467607] ? _dosysdeletemodule.constprop.0+0x178/0x280 [61110.467613] ? syscalltraceenter.constprop.0+0x145/0x1d0 [61110.467616] ? dosyscall64+0x5c/0x90 [61110.467619] ? excpagefault+0x62/0x150 [61110.467622] ? entrySYSCALL64afterhwframe+0x63/0xcd [61110.467626] </TASK> [61110.467627] Disabling lock debugging due to kernel taint [61110.467635] Object 0x0000000026f7e6e6 @offset=16000 [61110.467639] ------------[ cut here ]------------ [61110.467639] kmemcachedestroy qla2xxxsrbs: Slab cache still has objects when called from qla2x00moduleexit+0x93/0x99 [qla2xxx] [61110.467659] WARNING: CPU: 53 PID: 455206 at mm/slabcommon.c:520 kmemcachedestroy+0x14d/0x160 [61110.467718] CPU: 53 PID: 455206 Comm: rmmod Kdump: loaded Tainted: G B OE -------- --- 5.14.0-284.11.1.el92.x8664 #1 [61110.467720] Hardware name: HPE ProLiant DL385 Gen10 Plus v2/ProLiant DL385 Gen10 Plus v2, BIOS A42 08/17/2023 [61110.467721] RIP: 0010:kmemcachedestroy+0x14d/0x160 [61110.467724] Code: 99 7d 07 00 48 89 ef e8 e1 6a 07 00 eb b3 48 8b 55 60 48 8b 4c 24 20 48 c7 c6 70 fc 66 90 48 c7 c7 f8 ef a1 90 e8 e1 ed 7c 00 <0f> 0b eb 93 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 [61110.467725] RSP: 0018:ffffa304e489fe80 EFLAGS: 00010282 [61110.467727] RAX: 0000000000000000 RBX: ffffffffc0d9a860 RCX: 0000000000000027 [61110.467729] RDX: ffff8fd5ff9598a8 RSI: 0000000000000001 RDI: ffff8fd5ff9598a0 [61110.467730] RBP: ffff8fb6aaf78700 R08: 0000000000000000 R09: 0000000100d863b7 [61110.467731] R10: ffffa304e489fd20 R11: ffffffff913bef48 R12: 0000000040002000 [61110.467731] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [61110.467733] FS: 00007f64c89fb740(0000) GS:ffff8fd5ff940000(0000) knlGS:0000000000000000 [61110.467734] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [61110.467735] CR2: 00007f0f02bfe000 CR3: 00000020ad6dc005 CR4: 0000000000770ee0 [61110.467736] PKRU: 55555554 [61110.467737] Call Trace: [61110.467738] <TASK> [61110.467739] qla2x00moduleexit+0x93/0x99 [qla2xxx] [61110.467755] ? _dosysdeletemodule.constprop.0+0x178/0x280
Free sp in the error path to fix the crash.
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/71xxx/CVE-2025-71232.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/05fcd590e5fbbb3e9e1b4fc6c23c98a1d38cf256
- https://git.kernel.org/stable/c/19ac050ef09a2f0a9d9787540f77bb45cf9033e8
- https://git.kernel.org/stable/c/7adbd2b7809066c75f0433e5e2a8e114b429f30f
- https://git.kernel.org/stable/c/8e7597b4efee6143439641bc6522f247d585e060
- https://git.kernel.org/stable/c/aed16d37696f494288a291b4b477484ed0be774b
- https://git.kernel.org/stable/c/b410ab8b9431d6d63d04caa1d69909fcc8b25eae
- https://git.kernel.org/stable/c/b74408de1f2264220979f0c6a5a9d5e50b5b534b
- https://git.kernel.org/stable/c/f04840512438ac025dea6e357d80a986b28bbe4c
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/71xxx/CVE-2025-71232.json
- https://nvd.nist.gov/vuln/detail/CVE-2025-71232
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedf352eeb75419d2b693df7cc5957f7427c2b9b3eaFixedb410ab8b9431d6d63d04caa1d69909fcc8b25eaeFixedb74408de1f2264220979f0c6a5a9d5e50b5b534bFixed8e7597b4efee6143439641bc6522f247d585e060Fixedaed16d37696f494288a291b4b477484ed0be774bFixed05fcd590e5fbbb3e9e1b4fc6c23c98a1d38cf256Fixedf04840512438ac025dea6e357d80a986b28bbe4cFixed19ac050ef09a2f0a9d9787540f77bb45cf9033e8Fixed7adbd2b7809066c75f0433e5e2a8e114b429f30f
Affected versions
v4.*
v5.*
v6.*
Linux / Kernel
Package
- Name
- Kernel
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced4.16.0Fixed5.10.251
- Type
- ECOSYSTEM
- Events
-
Introduced5.11.0Fixed5.15.201
- Type
- ECOSYSTEM
- Events
-
Introduced5.16.0Fixed6.1.164
- Type
- ECOSYSTEM
- Events
-
Introduced6.2.0Fixed6.6.125
- Type
- ECOSYSTEM
- Events
-
Introduced6.7.0Fixed6.12.72
- Type
- ECOSYSTEM
- Events
-
Introduced6.13.0Fixed6.18.11
- Type
- ECOSYSTEM
- Events
-
Introduced6.19.0Fixed6.19.1