CVE-2025-21957

Updated: 2025-04-23 04:32:07.5948

Description:

In the Linux kernel, the following vulnerability has been resolved: scsi: qla1280: Fix kernel oops when debug level > 2 A null dereference or oops exception will eventually occur when qla1280.c driver is compiled with DEBUG_QLA1280 enabled and ql_debug_level > 2. I think its clear from the code that the intention here is sg_dma_len(s) not length of sg_next(s) when printing the debug info.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0
CVSS Version 3.x MEDIUM 5.5

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

AlmaLinux 9.2 ESU kernel 5.14.0 5.5 MEDIUM Ignored 2025-04-25 03:47:51
AlmaLinux 9.6 ESU kernel 5.14.0 5.5 MEDIUM Ignored 2025-07-05 02:18:01
CentOS 6 ELS kernel 2.6.32 5.5 MEDIUM Ignored 2025-04-25 03:47:51
CentOS 7 ELS kernel 3.10.0 5.5 MEDIUM Ignored 2025-04-25 03:47:50
CentOS 8.4 ELS kernel 4.18.0 5.5 MEDIUM Ignored 2025-04-25 03:47:51
CentOS 8.5 ELS kernel 4.18.0 5.5 MEDIUM Ignored 2025-04-25 03:47:51
CentOS Stream 8 ELS kernel 4.18.0 5.5 MEDIUM Ignored 2025-04-25 03:47:50
CloudLinux 6 ELS kernel 2.6.32 5.5 MEDIUM Ignored 2025-04-25 03:47:51
CloudLinux 7 ELS kernel 3.10.0 5.5 MEDIUM Ignored 2025-04-25 03:47:50
Oracle Linux 6 ELS kernel 2.6.32 5.5 MEDIUM Ignored 2025-04-25 03:47:50
Total: 16