---
id: CVE-2025-38695
title: 'scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure

  If a call to lpfc_sli4_read_rev() from lpfc_sli4_hba_setup() fails, the
  resultant cleanup rou…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 5e5b511d8bfaf765cb92a695cda336c936cb86dc <
    6711ce7e9de4eb1a541ef30638df1294ea4267f8
  - >-
    Linux >= 5e5b511d8bfaf765cb92a695cda336c936cb86dc <
    74bdf54a847dab209d2a8f65852f59b7fa156175
  - >-
    Linux >= 5e5b511d8bfaf765cb92a695cda336c936cb86dc <
    5e25ee1ecec91c61a8acf938ad338399cad464de
  - >-
    Linux >= 5e5b511d8bfaf765cb92a695cda336c936cb86dc <
    add68606a01dcccf18837a53e85b85caf0693b4b
  - >-
    Linux >= 5e5b511d8bfaf765cb92a695cda336c936cb86dc <
    7925dd68807cc8fd755b04ca99e7e6f1c04392e8
  - >-
    Linux >= 5e5b511d8bfaf765cb92a695cda336c936cb86dc <
    571617f171f723b05f02d154a2e549a17eab4935
  - >-
    Linux >= 5e5b511d8bfaf765cb92a695cda336c936cb86dc <
    d3f55f46bb37a8ec73bfe3cfe36e3ecfa2945dfa
  - >-
    Linux >= 5e5b511d8bfaf765cb92a695cda336c936cb86dc <
    46a0602c24d7d425dd8e00c749cd64a934aac7ec
  - >-
    Linux >= 5e5b511d8bfaf765cb92a695cda336c936cb86dc <
    6698796282e828733cde3329c887b4ae9e5545e9
  - Linux 5.1
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T21:07:34.181213Z'
published: '2025-09-04'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T21:12:53.493Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-38695'
references:
  - url: 'https://git.kernel.org/stable/c/6711ce7e9de4eb1a541ef30638df1294ea4267f8'
  - url: 'https://git.kernel.org/stable/c/74bdf54a847dab209d2a8f65852f59b7fa156175'
  - url: 'https://git.kernel.org/stable/c/5e25ee1ecec91c61a8acf938ad338399cad464de'
  - url: 'https://git.kernel.org/stable/c/add68606a01dcccf18837a53e85b85caf0693b4b'
  - url: 'https://git.kernel.org/stable/c/7925dd68807cc8fd755b04ca99e7e6f1c04392e8'
  - url: 'https://git.kernel.org/stable/c/571617f171f723b05f02d154a2e549a17eab4935'
  - url: 'https://git.kernel.org/stable/c/d3f55f46bb37a8ec73bfe3cfe36e3ecfa2945dfa'
  - url: 'https://git.kernel.org/stable/c/46a0602c24d7d425dd8e00c749cd64a934aac7ec'
  - url: 'https://git.kernel.org/stable/c/6698796282e828733cde3329c887b4ae9e5545e9'
tags:
  - cve.org
epss: 0.00183
epssPercentile: 0.07931
ingestedAt: '2026-11-05T22:38:32.013Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure

If a call to lpfc_sli4_read_rev() from lpfc_sli4_hba_setup() fails, the
resultant cleanup routine lpfc_sli4_vport_delete_fcp_xri_aborted() may
occur before sli4_hba.hdwqs are allocated.  This may result in a null
pointer dereference when attempting to take the abts_io_buf_list_lock for
the first hardware queue.  Fix by adding a null ptr check on
phba->sli4_hba.hdwq and early return because this situation means there
must have been an error during port initialization.

## Affected

- `Linux >= 5e5b511d8bfaf765cb92a695cda336c936cb86dc < 6711ce7e9de4eb1a541ef30638df1294ea4267f8`
- `Linux >= 5e5b511d8bfaf765cb92a695cda336c936cb86dc < 74bdf54a847dab209d2a8f65852f59b7fa156175`
- `Linux >= 5e5b511d8bfaf765cb92a695cda336c936cb86dc < 5e25ee1ecec91c61a8acf938ad338399cad464de`
- `Linux >= 5e5b511d8bfaf765cb92a695cda336c936cb86dc < add68606a01dcccf18837a53e85b85caf0693b4b`
- `Linux >= 5e5b511d8bfaf765cb92a695cda336c936cb86dc < 7925dd68807cc8fd755b04ca99e7e6f1c04392e8`
- `Linux >= 5e5b511d8bfaf765cb92a695cda336c936cb86dc < 571617f171f723b05f02d154a2e549a17eab4935`
- `Linux >= 5e5b511d8bfaf765cb92a695cda336c936cb86dc < d3f55f46bb37a8ec73bfe3cfe36e3ecfa2945dfa`
- `Linux >= 5e5b511d8bfaf765cb92a695cda336c936cb86dc < 46a0602c24d7d425dd8e00c749cd64a934aac7ec`
- `Linux >= 5e5b511d8bfaf765cb92a695cda336c936cb86dc < 6698796282e828733cde3329c887b4ae9e5545e9`
- `Linux 5.1`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.