cbcvebase.
CVE-2025-71232
published 2026-02-18

CVE-2025-71232: In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Free sp in error path to fix system crash System crash seen during…

PriorityP420medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.12%
2.0th percentile
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Free sp in error path to fix system crash System crash seen during load/unload test in a loop, [61110.449331] qla2xxx [0000:27:00.0]-0042:0: Disabled MSI-X. [61110.467494] ============================================================================= [61110.467498] BUG qla2xxx_srbs (Tainted: G OE -------- --- ): Objects remaining in qla2xxx_srbs on __kmem_cache_shutdown() [61110.467501] ----------------------------------------------------------------------------- [61110.467502] Slab 0x000000000ffc8162 objects=51 used=1 fp=0x00000000e25d3d85 flags=0x57ffffc0010200(slab|head|node=1|zone=2|lastcpupid=0x1fffff) [61110.467509] CPU: 53 PID: 455206 Comm: rmmod Kdump: loaded Tainted: G OE -------- --- 5.14.0-284.11.1.el9_2.x86_64 #1 [61110.467513] Hardware name: HPE ProLiant DL385 Gen10 Plus v2/ProLiant DL385 Gen10 Plus v2, BIOS A42 08/17/2023 [61110.467515] Call Trace: [61110.467516] [61110.467519] dump_stack_lvl+0x34/0x48 [61110.467526] slab_err.cold+0x53/0x67 [61110.467534] __kmem_cache_shutdown+0x16e/0x320 [61110.467540] kmem_cache_destroy+0x51/0x160 [61110.467544] qla2x00_module_exit+0x93/0x99 [qla2xxx] [61110.467607] ? __do_sys_delete_module.constprop.0+0x178/0x280 [61110.467613] ? syscall_trace_enter.constprop.0+0x145/0x1d0 [61110.467616] ? do_syscall_64+0x5c/0x90 [61110.467619] ? exc_page_fault+0x62/0x150 [61110.467622] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [61110.467626] [61110.467627] Disabling lock debugging due to kernel taint [61110.467635] Object 0x0000000026f7e6e6 @offset=16000 [61110.467639] ------------[ cut here ]------------ [61110.467639] kmem_cache_destroy qla2xxx_srbs: Slab cache still has objects when called from qla2x00_module_exit+0x93/0x99 [qla2xxx] [61110.467659] WARNING: CPU: 53 PID: 455206 at mm/slab_common.c:520 kmem_cache_destroy+0x14d/0x160 [61110.467718] CPU: 53 PID: 455206 Comm: rmmod Kdump: loaded Tainted: G B OE -------- --- 5.14.0-284.11.1.el9_2.x8

Affected

66 ranges· showing 25
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.164-1 (bookworm)linux 6.1.164-1 (bookworm)
debianlinux-6.1< linux 6.1.164-1 (bookworm)linux 6.1.164-1 (bookworm)
linuxlinux
linuxlinux>= f352eeb75419d2b693df7cc5957f7427c2b9b3ea < b410ab8b9431d6d63d04caa1d69909fcc8b25eaeb410ab8b9431d6d63d04caa1d69909fcc8b25eae
linuxlinux>= f352eeb75419d2b693df7cc5957f7427c2b9b3ea < b74408de1f2264220979f0c6a5a9d5e50b5b534bb74408de1f2264220979f0c6a5a9d5e50b5b534b
linuxlinux>= f352eeb75419d2b693df7cc5957f7427c2b9b3ea < 8e7597b4efee6143439641bc6522f247d585e0608e7597b4efee6143439641bc6522f247d585e060
linuxlinux>= f352eeb75419d2b693df7cc5957f7427c2b9b3ea < aed16d37696f494288a291b4b477484ed0be774baed16d37696f494288a291b4b477484ed0be774b
linuxlinux>= f352eeb75419d2b693df7cc5957f7427c2b9b3ea < 05fcd590e5fbbb3e9e1b4fc6c23c98a1d38cf25605fcd590e5fbbb3e9e1b4fc6c23c98a1d38cf256
linuxlinux>= f352eeb75419d2b693df7cc5957f7427c2b9b3ea < f04840512438ac025dea6e357d80a986b28bbe4cf04840512438ac025dea6e357d80a986b28bbe4c
linuxlinux>= f352eeb75419d2b693df7cc5957f7427c2b9b3ea < 19ac050ef09a2f0a9d9787540f77bb45cf9033e819ac050ef09a2f0a9d9787540f77bb45cf9033e8
linuxlinux>= f352eeb75419d2b693df7cc5957f7427c2b9b3ea < 7adbd2b7809066c75f0433e5e2a8e114b429f30f7adbd2b7809066c75f0433e5e2a8e114b429f30f
linuxlinux_kernel>= 0 < 5.10.251-15.10.251-1
linuxlinux_kernel>= 0 < 6.1.164-16.1.164-1
linuxlinux_kernel>= 0 < 6.12.73-16.12.73-1
linuxlinux_kernel>= 0 < 6.18.12-16.18.12-1
linuxlinux_kernel>= 4.16 < 5.10.2515.10.251
linuxlinux_kernel>= 5.11 < 5.15.2015.15.201
linuxlinux_kernel>= 5.16 < 6.1.1646.1.164
linuxlinux_kernel>= 6.13 < 6.18.116.18.11
linuxlinux_kernel>= 6.19 < 6.19.16.19.1
linuxlinux_kernel>= 6.2 < 6.6.1256.6.125
linuxlinux_kernel>= 6.7 < 6.12.726.12.72
msrcazl3_kernel_6.6.121.1-1_on_azure_linux_3.0
msrccbl2_kernel_5.15.200.1-1_on_cbl_mariner_2.0
ubuntulinux

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_ubuntu8.8HIGH
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
vendor_msrc4.7MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.