CVE-2025-38699
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
scsi: bfa: Double-free fix
In the Linux kernel, the following vulnerability has been resolved: scsi: bfa: Double-free fix When the bfad_im_probe() function fails during initialization, the memory pointed to by bfad->im is freed without setting bfad->im to NULL. Subsequently, during driver uninstallation, when the state machine enters the bfad_sm_stopping state and calls the bfad_im_probe_undo() function, it attempts to free the memory pointed to by bfad->im again, thereby triggering a double-free vulnerability. Set bfad->im to NULL if probing fails.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e | affected | git | 684c92bb08a25ed3c0356bc7eb532ed5b19588dd | Unavailable | None listed |
| 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e | affected | git | 9337c2affbaebe00b75fdf84ea0e2fcf93c140af | Unavailable | None listed |
| 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e | affected | git | ba024d92564580bb90ec367248ace8efe16ce815 | Unavailable | None listed |
| 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e | affected | git | 8e03dd9fadf76db5b9799583074a1a2a54f787f1 | Unavailable | None listed |
| 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e | affected | git | 39cfe2c83146aad956318f866d0ee471b7a61fa5 | Unavailable | None listed |
| 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e | affected | git | 13f613228cf3c96a038424cd97aa4d6aadc66294 | Unavailable | None listed |
| 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e | affected | git | 8456f862cb95bcc3a831e1ba87c0c17068be0f3f | Unavailable | None listed |
| 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e | affected | git | 50d9bd48321038bd6e15af5a454bbcd180cf6f80 | Unavailable | None listed |
| 7725ccfda59715ecf8f99e3b520a0b84cc2ea79e | affected | git | add4c4850363d7c1b72e8fce9ccb21fdd2cf5dc9 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 2.6.32 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 2.6.32 | Unavailable | None listed |
| 5.4.297 | unaffected | semver | Unavailable | 5.4.* | None listed |
| 5.10.241 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.190 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.1.149 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.103 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.12.43 | unaffected | semver | Unavailable | 6.12.* | None listed |
| 6.15.11 | unaffected | semver | Unavailable | 6.15.* | None listed |
| 6.16.2 | unaffected | semver | Unavailable | 6.16.* | None listed |
| 6.17 | unaffected | original_commit_for_fix | Unavailable | * | None listed |