{"id":"CVE-2025-68745","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Clear cmds after chip reset\n\nCommit aefed3e5548f (\"scsi: qla2xxx: target: Fix offline port handling\nand host reset handling\") caused two problems:\n\n1","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Clear cmds after chip reset\n\nCommit aefed3e5548f (\"scsi: qla2xxx: target: Fix offline port handling\nand host reset handling\") caused two problems:\n\n1. Co…","severity":"critical","cvss":9.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","published":"2025-12-24","updated":"2026-10-13","sourceUpdated":"2026-10-13T10:10:00.193","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-68745","references":[{"url":"https://git.kernel.org/stable/c/5c1fb3fd05da3d55b8cbc42d7d660b313cbdc936","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/d46c69a087aa3d1513f7a78f871b80251ea0c1ae","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-68745.json"},{"url":"https://access.redhat.com/security/cve/CVE-2025-68745"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2425039"},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-68745"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68745"},{"url":"https://lore.kernel.org/linux-cve-announce/2025122416-CVE-2025-68745-69b5@gregkh/T"},{"url":"https://access.redhat.com/errata/RHSA-2026:67471"},{"url":"https://access.redhat.com/errata/RHSA-2026:67150"},{"url":"https://access.redhat.com/errata/RHSA-2026:66325"},{"url":"https://access.redhat.com/errata/RHSA-2026:66324"},{"url":"https://git.kernel.org/stable/c/0d0a1a267c1ee7c41aeffdca84afcb113787a91a"},{"url":"https://git.kernel.org/stable/c/c82c0fbb97d0fd44324eb55ab758408c7c964b32"},{"url":"https://access.redhat.com/errata/RHSA-2026:88687"},{"url":"https://access.redhat.com/errata/RHSA-2026:85000"}],"tags":["nvd","cve.org","csaf","vex","red-hat","score-dispute"],"epss":0.00499,"epssPercentile":0.42547,"ingestedAt":"2026-10-13T10:22:03.519Z","vendor":"Linux","product":"Linux","affected":["Linux >= aefed3e5548f28e5fecafda6604fcbc65484dbaa < 5c1fb3fd05da3d55b8cbc42d7d660b313cbdc936","Linux >= aefed3e5548f28e5fecafda6604fcbc65484dbaa < d46c69a087aa3d1513f7a78f871b80251ea0c1ae","Linux eb67b7a23d357f578578e737cb6412ae2384f352","Linux ec9639d92c1e10d4bc667e842753d85e21683d5c","Linux e6e957f552d5b696879a31e5b0e2a9120e1ea86e","Linux >= 4.9.316 < 4.10","Linux >= 4.14.281 < 4.15","Linux >= 4.19.245 < 4.20","Linux 5.2"],"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"total","timestamp":"2026-10-16T15:04:59.378599Z"},"patched":["enterprise_linux_appstream_v_10","enterprise_linux_appstream_v_9","enterprise_linux_baseos_v_10","enterprise_linux_baseos_v_8","enterprise_linux_baseos_v_9","enterprise_linux_codeready_linux_builder_v_10","enterprise_linux_crb_v_8","enterprise_linux_codeready_linux_builder_v_9","enterprise_linux_real_time_for_nfv_v_10","enterprise_linux_nfv_v_8","enterprise_linux_real_time_for_nfv_v_9","enterprise_linux_real_time_v_10","enterprise_linux_rt_v_8","enterprise_linux_real_time_v_9"],"cwe":["CWE-366"],"scores":{"nvd":9.8,"vendor":4.7,"cna":9.8},"slug":"CVE-2025-68745","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Clear cmds after chip reset\n\nCommit aefed3e5548f (\"scsi: qla2xxx: target: Fix offline port handling\nand host reset handling\") caused two problems:\n\n1. Commands sent to FW, after chip reset got stuck and never freed as FW\n   is not going to respond to them anymore.\n\n2. BUG_ON(cmd->sg_mapped) in qlt_free_cmd().  Commit 26f9ce53817a\n   (\"scsi: qla2xxx: Fix missed DMA unmap for aborted commands\")\n   attempted to fix this, but introduced another bug under different\n   circumstances when two different CPUs were racing to call\n   qlt_unmap_sg() at the same time: BUG_ON(!valid_dma_direction(dir)) in\n   dma_unmap_sg_attrs().\n\nSo revert \"scsi: qla2xxx: Fix missed DMA unmap for aborted commands\" and\npartially revert \"scsi: qla2xxx: target: Fix offline port handling and\nhost reset handling\" at __qla2x00_abort_all_cmds.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Vendor advisories\n\n- **RHSA-2026:67471** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10), Red Hat Enterprise Linux Real Time for NFV (v. 10), Red Hat Enterprise Linux Real Time (v. 10) · released 2026-09-15 · [advisory](https://access.redhat.com/errata/RHSA-2026:67471)\n- **RHSA-2026:67150** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9), Red Hat Enterprise Linux Real Time for NFV (v. 9), Red Hat Enterprise Linux Real Time (v. 9) · released 2026-09-14 · [advisory](https://access.redhat.com/errata/RHSA-2026:67150)\n- **RHSA-2026:66325** · Red Hat · fixed in: Red Hat Enterprise Linux BaseOS (v. 8), Red Hat Enterprise Linux CRB (v. 8) · released 2026-09-10 · [advisory](https://access.redhat.com/errata/RHSA-2026:66325)\n- **RHSA-2026:66324** · Red Hat · fixed in: Red Hat Enterprise Linux NFV (v. 8), Red Hat Enterprise Linux RT (v. 8) · released 2026-09-10 · [advisory](https://access.redhat.com/errata/RHSA-2026:66324)\n- **Red Hat VEX** · Moderate · affected: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 9 · no fix planned: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 9 · updated 2026-10-23 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-68745.json)\n- **RHSA-2026:88687** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux BaseOS EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0), Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0), Red Hat Enterprise Linux Real Time EUS (v. 10.0) · released 2026-10-23 · [advisory](https://access.redhat.com/errata/RHSA-2026:88687)\n- **RHSA-2026:85000** · Red Hat · fixed in: Red Hat Enterprise Linux BaseOS AUS (v.8.6), Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) · released 2026-10-19 · [advisory](https://access.redhat.com/errata/RHSA-2026:85000)","depth":"midnight","depthScore":54,"depthScoreParts":{"impact":53.9,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}