CVE-2025-71232

CWE-7728 documents8 sources
Severity
5.5MEDIUM
EPSS
0.0%
top 93.55%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedFeb 18

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Free sp in error path to fix system crash System crash seen during load/unload test in a loop, [61110.449331] qla2xxx [0000:27:00.0]-0042:0: Disabled MSI-X. [61110.467494] ============================================================================= [61110.467498] BUG qla2xxx_srbs (Tainted: G OE -------- --- ): Objects remaining in qla2xxx_srbs on __kmem_cache_shutdown() [61110.467501] -------------------------

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

NVDlinux/linux_kernel4.165.10.251+6
CVEListV5linux/linuxf352eeb75419d2b693df7cc5957f7427c2b9b3eab410ab8b9431d6d63d04caa1d69909fcc8b25eae+8
Debianlinux< 5.10.251-1+3
Debianlinux-6.1< 6.1.164-1~deb11u1

Patches

🔴Vulnerability Details

3
OSV
CVE-2025-71232: In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Free sp in error path to fix system crash System crash seen during2026-02-18
GHSA
GHSA-3w2g-4qx3-2mmw: In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Free sp in error path to fix system crash System crash seen durin2026-02-18
CVEList
scsi: qla2xxx: Free sp in error path to fix system crash2026-02-18

📋Vendor Advisories

3
Red Hat
kernel: scsi: qla2xxx: Free sp in error path to fix system crash2026-02-18
Microsoft
scsi: qla2xxx: Free sp in error path to fix system crash2026-02-10
Debian
CVE-2025-71232: linux - In the Linux kernel, the following vulnerability has been resolved: scsi: qla2x...2025

🕵️Threat Intelligence

1
Wiz
CVE-2025-71232 Impact, Exploitability, and Mitigation Steps | Wiz