{"id":"CVE-2025-38695","title":"scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure\n\nIf a call to lpfc_sli4_read_rev() from lpfc_sli4_hba_setup() fails, the\nresultant cleanup rou…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 5e5b511d8bfaf765cb92a695cda336c936cb86dc < 6711ce7e9de4eb1a541ef30638df1294ea4267f8","Linux >= 5e5b511d8bfaf765cb92a695cda336c936cb86dc < 74bdf54a847dab209d2a8f65852f59b7fa156175","Linux >= 5e5b511d8bfaf765cb92a695cda336c936cb86dc < 5e25ee1ecec91c61a8acf938ad338399cad464de","Linux >= 5e5b511d8bfaf765cb92a695cda336c936cb86dc < add68606a01dcccf18837a53e85b85caf0693b4b","Linux >= 5e5b511d8bfaf765cb92a695cda336c936cb86dc < 7925dd68807cc8fd755b04ca99e7e6f1c04392e8","Linux >= 5e5b511d8bfaf765cb92a695cda336c936cb86dc < 571617f171f723b05f02d154a2e549a17eab4935","Linux >= 5e5b511d8bfaf765cb92a695cda336c936cb86dc < d3f55f46bb37a8ec73bfe3cfe36e3ecfa2945dfa","Linux >= 5e5b511d8bfaf765cb92a695cda336c936cb86dc < 46a0602c24d7d425dd8e00c749cd64a934aac7ec","Linux >= 5e5b511d8bfaf765cb92a695cda336c936cb86dc < 6698796282e828733cde3329c887b4ae9e5545e9","Linux 5.1"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T21:07:34.181213Z"},"published":"2025-09-04","updated":"2026-11-05","sourceUpdated":"2026-11-05T21:12:53.493Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-38695","references":[{"url":"https://git.kernel.org/stable/c/6711ce7e9de4eb1a541ef30638df1294ea4267f8"},{"url":"https://git.kernel.org/stable/c/74bdf54a847dab209d2a8f65852f59b7fa156175"},{"url":"https://git.kernel.org/stable/c/5e25ee1ecec91c61a8acf938ad338399cad464de"},{"url":"https://git.kernel.org/stable/c/add68606a01dcccf18837a53e85b85caf0693b4b"},{"url":"https://git.kernel.org/stable/c/7925dd68807cc8fd755b04ca99e7e6f1c04392e8"},{"url":"https://git.kernel.org/stable/c/571617f171f723b05f02d154a2e549a17eab4935"},{"url":"https://git.kernel.org/stable/c/d3f55f46bb37a8ec73bfe3cfe36e3ecfa2945dfa"},{"url":"https://git.kernel.org/stable/c/46a0602c24d7d425dd8e00c749cd64a934aac7ec"},{"url":"https://git.kernel.org/stable/c/6698796282e828733cde3329c887b4ae9e5545e9"}],"tags":["cve.org"],"epss":0.00183,"epssPercentile":0.07931,"ingestedAt":"2026-11-05T22:38:32.013Z","slug":"CVE-2025-38695","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nscsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure\n\nIf a call to lpfc_sli4_read_rev() from lpfc_sli4_hba_setup() fails, the\nresultant cleanup routine lpfc_sli4_vport_delete_fcp_xri_aborted() may\noccur before sli4_hba.hdwqs are allocated.  This may result in a null\npointer dereference when attempting to take the abts_io_buf_list_lock for\nthe first hardware queue.  Fix by adding a null ptr check on\nphba->sli4_hba.hdwq and early return because this situation means there\nmust have been an error during port initialization.\n\n## Affected\n\n- `Linux >= 5e5b511d8bfaf765cb92a695cda336c936cb86dc < 6711ce7e9de4eb1a541ef30638df1294ea4267f8`\n- `Linux >= 5e5b511d8bfaf765cb92a695cda336c936cb86dc < 74bdf54a847dab209d2a8f65852f59b7fa156175`\n- `Linux >= 5e5b511d8bfaf765cb92a695cda336c936cb86dc < 5e25ee1ecec91c61a8acf938ad338399cad464de`\n- `Linux >= 5e5b511d8bfaf765cb92a695cda336c936cb86dc < add68606a01dcccf18837a53e85b85caf0693b4b`\n- `Linux >= 5e5b511d8bfaf765cb92a695cda336c936cb86dc < 7925dd68807cc8fd755b04ca99e7e6f1c04392e8`\n- `Linux >= 5e5b511d8bfaf765cb92a695cda336c936cb86dc < 571617f171f723b05f02d154a2e549a17eab4935`\n- `Linux >= 5e5b511d8bfaf765cb92a695cda336c936cb86dc < d3f55f46bb37a8ec73bfe3cfe36e3ecfa2945dfa`\n- `Linux >= 5e5b511d8bfaf765cb92a695cda336c936cb86dc < 46a0602c24d7d425dd8e00c749cd64a934aac7ec`\n- `Linux >= 5e5b511d8bfaf765cb92a695cda336c936cb86dc < 6698796282e828733cde3329c887b4ae9e5545e9`\n- `Linux 5.1`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}