NetSight
IP …
high7.8

CVE-2025-71075

In the Linux kernel, the following vulnerability has been resolved: scsi: aic94xx: fix use-after-free in device removal path The asd_pci_remove() function fail…

Impact

In the Linux kernel, the following vulnerability has been resolved: scsi: aic94xx: fix use-after-free in device removal path The asd_pci_remove() function fails to synchronize with pending tasklets before freeing the asd_ha structure, leading to a potential use-after-free vulnerability. When a device removal is triggered (via hot-unplug or module unload), race condition can occur. The fix adds tasklet_kill() before freeing the asd_ha structure, ensuring all scheduled tasklets complete before cleanup proceeds.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.19.1 before 5.10.248
from 5.11 before 5.15.198
from 5.16 before 6.1.160
from 6.2 before 6.6.120
from 6.7 before 6.12.64
from 6.13 before 6.18.3

Weakness classification

CWE-416

References