CVE-2025-38289

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The Linux kernel contains a potential use-after-free issue within the dev loss tmo callbk function in the SCSI Low-Level Fibre Channel (lpfc) driver. Smatch, a static analysis tool, detected this potential flaw during driver unload or fatal error handling, specifically concerning an ndlp object. The issue was addressed by reordering code to prevent the use-after-free if the initial nodelist reference has been removed.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.