Tracker / CVE-2025-21957
CVE-2025-21957
Medium 5.5
In the Linux kernel, the following vulnerability has been resolved: scsi: qla1280: Fix kernel oops when debug level > 2 A null dereference or oops exception will eventually occur when qla1280.c driver is compiled with DEBUG_QLA1280 enabled and ql_debug_level > 2. I think its clear from the code that the intention here is sg_dma_len(s) not length of sg_next(s) when printing the debug info.
Affected products and versions
| linux | linux_kernel |
|---|---|
| linux | linux_kernel · … → 5.4.292 |
| linux | linux_kernel · 5.11 → 5.15.180 |
| linux | linux_kernel · 5.16 → 6.1.132 |
| linux | linux_kernel · 5.5 → 5.10.236 |
| linux | linux_kernel · 6.13 → 6.13.8 |
| linux | linux_kernel · 6.2 → 6.6.84 |
| linux | linux_kernel · 6.7 → 6.12.20 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.