--- id: CVE-2025-68745 title: |- In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Clear cmds after chip reset Commit aefed3e5548f ("scsi: qla2xxx: target: Fix offline port handling and host reset handling") caused two problems: 1 summary: |- In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Clear cmds after chip reset Commit aefed3e5548f ("scsi: qla2xxx: target: Fix offline port handling and host reset handling") caused two problems: 1. Co… severity: critical cvss: 9.8 cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H' published: '2025-12-24' updated: '2026-10-13' sourceUpdated: '2026-10-13T10:10:00.193' source: NVD sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-68745' references: - url: 'https://git.kernel.org/stable/c/5c1fb3fd05da3d55b8cbc42d7d660b313cbdc936' label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 - url: 'https://git.kernel.org/stable/c/d46c69a087aa3d1513f7a78f871b80251ea0c1ae' label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 - url: >- https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-68745.json - url: 'https://access.redhat.com/security/cve/CVE-2025-68745' - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2425039' - url: 'https://www.cve.org/CVERecord?id=CVE-2025-68745' - url: 'https://nvd.nist.gov/vuln/detail/CVE-2025-68745' - url: >- https://lore.kernel.org/linux-cve-announce/2025122416-CVE-2025-68745-69b5@gregkh/T - url: 'https://access.redhat.com/errata/RHSA-2026:67471' - url: 'https://access.redhat.com/errata/RHSA-2026:67150' - url: 'https://access.redhat.com/errata/RHSA-2026:66325' - url: 'https://access.redhat.com/errata/RHSA-2026:66324' - url: 'https://git.kernel.org/stable/c/0d0a1a267c1ee7c41aeffdca84afcb113787a91a' - url: 'https://git.kernel.org/stable/c/c82c0fbb97d0fd44324eb55ab758408c7c964b32' - url: 'https://access.redhat.com/errata/RHSA-2026:88687' - url: 'https://access.redhat.com/errata/RHSA-2026:85000' tags: - nvd - cve.org - csaf - vex - red-hat - score-dispute epss: 0.00499 epssPercentile: 0.42547 ingestedAt: '2026-10-13T10:22:03.519Z' vendor: Linux product: Linux affected: - >- Linux >= aefed3e5548f28e5fecafda6604fcbc65484dbaa < 5c1fb3fd05da3d55b8cbc42d7d660b313cbdc936 - >- Linux >= aefed3e5548f28e5fecafda6604fcbc65484dbaa < d46c69a087aa3d1513f7a78f871b80251ea0c1ae - Linux eb67b7a23d357f578578e737cb6412ae2384f352 - Linux ec9639d92c1e10d4bc667e842753d85e21683d5c - Linux e6e957f552d5b696879a31e5b0e2a9120e1ea86e - Linux >= 4.9.316 < 4.10 - Linux >= 4.14.281 < 4.15 - Linux >= 4.19.245 < 4.20 - Linux 5.2 ssvc: exploitation: none automatable: 'yes' technicalImpact: total timestamp: '2026-10-16T15:04:59.378599Z' patched: - enterprise_linux_appstream_v_10 - enterprise_linux_appstream_v_9 - enterprise_linux_baseos_v_10 - enterprise_linux_baseos_v_8 - enterprise_linux_baseos_v_9 - enterprise_linux_codeready_linux_builder_v_10 - enterprise_linux_crb_v_8 - enterprise_linux_codeready_linux_builder_v_9 - enterprise_linux_real_time_for_nfv_v_10 - enterprise_linux_nfv_v_8 - enterprise_linux_real_time_for_nfv_v_9 - enterprise_linux_real_time_v_10 - enterprise_linux_rt_v_8 - enterprise_linux_real_time_v_9 cwe: - CWE-366 scores: nvd: 9.8 vendor: 4.7 cna: 9.8 --- ## Overview In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Clear cmds after chip reset Commit aefed3e5548f ("scsi: qla2xxx: target: Fix offline port handling and host reset handling") caused two problems: 1. Commands sent to FW, after chip reset got stuck and never freed as FW is not going to respond to them anymore. 2. BUG_ON(cmd->sg_mapped) in qlt_free_cmd(). Commit 26f9ce53817a ("scsi: qla2xxx: Fix missed DMA unmap for aborted commands") attempted to fix this, but introduced another bug under different circumstances when two different CPUs were racing to call qlt_unmap_sg() at the same time: BUG_ON(!valid_dma_direction(dir)) in dma_unmap_sg_attrs(). So revert "scsi: qla2xxx: Fix missed DMA unmap for aborted commands" and partially revert "scsi: qla2xxx: target: Fix offline port handling and host reset handling" at __qla2x00_abort_all_cmds. ## Remediation Refer to the linked advisories for vendor-supplied fixes and affected version ranges. ## Vendor advisories - **RHSA-2026:67471** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10), Red Hat Enterprise Linux Real Time for NFV (v. 10), Red Hat Enterprise Linux Real Time (v. 10) · released 2026-09-15 · [advisory](https://access.redhat.com/errata/RHSA-2026:67471) - **RHSA-2026:67150** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9), Red Hat Enterprise Linux Real Time for NFV (v. 9), Red Hat Enterprise Linux Real Time (v. 9) · released 2026-09-14 · [advisory](https://access.redhat.com/errata/RHSA-2026:67150) - **RHSA-2026:66325** · Red Hat · fixed in: Red Hat Enterprise Linux BaseOS (v. 8), Red Hat Enterprise Linux CRB (v. 8) · released 2026-09-10 · [advisory](https://access.redhat.com/errata/RHSA-2026:66325) - **RHSA-2026:66324** · Red Hat · fixed in: Red Hat Enterprise Linux NFV (v. 8), Red Hat Enterprise Linux RT (v. 8) · released 2026-09-10 · [advisory](https://access.redhat.com/errata/RHSA-2026:66324) - **Red Hat VEX** · Moderate · affected: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 9 · no fix planned: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 9 · updated 2026-10-23 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-68745.json) - **RHSA-2026:88687** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux BaseOS EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0), Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0), Red Hat Enterprise Linux Real Time EUS (v. 10.0) · released 2026-10-23 · [advisory](https://access.redhat.com/errata/RHSA-2026:88687) - **RHSA-2026:85000** · Red Hat · fixed in: Red Hat Enterprise Linux BaseOS AUS (v.8.6), Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) · released 2026-10-19 · [advisory](https://access.redhat.com/errata/RHSA-2026:85000)