CVE-2025-71232

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.14.0-284.11.1.el9 2

Description The Linux kernel contains a flaw related to the qla2xxx SCSI driver. A system crash can occur during load/unload testing due to improper handling of memory allocation and deallocation within the driver, specifically when freeing spinlocks in an error path. This issue is triggered during the shutdown process of the qla2xxx module, leading to a kernel panic. The error message indicates that objects remain in the qla2xxx srbs slab cache when the cache is destroyed.

Recommendations Update the Linux kernel to version 5.14.0-284.11.1.el9 2 or later.