CVE-2025-38699

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a double-free vulnerability within the SCSI subsystem, specifically in the bfa driver. During initialization, if the bfad im probe() function fails, the memory pointed to by bfad->im is freed without being set to NULL. Subsequently, during driver uninstallation, the bfad im probe undo() function attempts to free the same memory again, leading to a double-free condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.