PT-2025-53011

CVE-2025-68745

·

Published

2025-12-24

·

Updated

2026-10-17

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fix included in commit aefed3e5548f
Description The Linux kernel contains an issue within the qla2xxx SCSI driver related to command handling after a chip reset. A previous commit (aefed3e5548f) introduced problems where commands sent to the firmware after a chip reset would become stuck and not be freed, as the firmware would not respond to them. A subsequent attempt to address this (commit 26f9ce53817a) introduced a bug involving concurrent access to qlt unmap sg() from multiple CPUs, leading to a kernel panic. The resolution involves reverting the problematic commit (26f9ce53817a) and partially reverting the initial commit (aefed3e5548f) specifically within the qla2x00 abort all cmds function.
Recommendations Update the Linux kernel to a version that includes the fix for this issue, specifically the commit aefed3e5548f.
Exploitability
Exploit
Fix
Vendors
Affected products
Related identifiers
ALSA-2026:66324
ALSA-2026:66325
ALSA-2026:67150
ALSA-2026:67471
AZL-73087
ECHO-927A-8A19-56AC
OESA-2026-1075
OESA-2026-1076
OESA-2026-1759
OESA-2026-1760
OESA-2026-1761
OPENSUSE-SU-2026:10039-1
OPENSUSE-SU-2026:10301-1
OPENSUSE-SU-2026:20416-1
RHSA-2026:66324
RHSA-2026:66325
RHSA-2026:67150
SUSE-SU-2026:20838-1
SUSE-SU-2026:20873-1
SUSE-SU-2026:20931-1
SUSE-SU-2026:21284-1
USN-8177-1
USN-8177-2
USN-8183-1
USN-8183-2
USN-8245-1
USN-8257-1
USN-8781-1
Found an issue in the description? Have something to add? Feel free to write us 👾