NetSight
IP …
medium5.5

CVE-2025-21957

In the Linux kernel, the following vulnerability has been resolved: scsi: qla1280: Fix kernel oops when debug level > 2 A null dereference or oops exception wi…

Impact

In the Linux kernel, the following vulnerability has been resolved: scsi: qla1280: Fix kernel oops when debug level > 2 A null dereference or oops exception will eventually occur when qla1280.c driver is compiled with DEBUG_QLA1280 enabled and ql_debug_level > 2. I think its clear from the code that the intention here is sg_dma_len(s) not length of sg_next(s) when printing the debug info.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 5.4.292
from 5.5 before 5.10.236
from 5.11 before 5.15.180
from 5.16 before 6.1.132
from 6.2 before 6.6.84
from 6.7 before 6.12.20

Weakness classification

CWE-476

References