9.8

CVE-2025-68745: scsi: qla2xxx: Clear cmds after chip reset

Deferred
AliasesUBUNTU-CVE-2025-68745DEBIAN-CVE-2025-68745
Published 24-12-2025Last modified 30-10-2026

Vulnerability summary

CVE-2025-68745 is a critical (CVSS 9.8) vulnerability in linux. EPSS estimates a 0.50% chance of exploitation in the next 30 days, higher than 42.8% of scored vulnerabilities.

Priority
Prioritisesevere

Severe, CVSS 9.8 (CVE.org); no exploitation reported by the 5 checked sources; EPSS 0% (FIRST, 03-11-2026)

Source freshness unavailable

How is this decided?
CVSS score
9.8/10
010
Critical · v3.1 (CVE.org)
EPSS score
0.50%
0%100%
Low · +0.13 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 17 · Related 13
OPENSUSE-SU-2026:10039-1OPENSUSE-SU-2026:10301-1OPENSUSE-SU-2026:20416-1RHSA-2026:66324RHSA-2026:66325RHSA-2026:67150

Timeline

  1. 24-12-2025
    PublishedVulnerability first disclosed.
  2. 30-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Clear cmds after chip reset Commit aefed3e5548f ("scsi: qla2xxx: target: Fix offline port handling and host reset handling") caused two problems: 1. Commands sent to FW, after chip reset got stuck and never freed as FW is not going to respond to them anymore. 2. BUG_ON(cmd->sg_mapped) in qlt_free_cmd(). Commit 26f9ce53817a ("scsi: qla2xxx: Fix missed DMA unmap for aborted commands") attempted to fix this, but introduced another bug under different circumstances when two different CPUs were racing to call qlt_unmap_sg() at the same time: BUG_ON(!valid_dma_direction(dir)) in dma_unmap_sg_attrs(). So revert "scsi: qla2xxx: Fix missed DMA unmap for aborted commands" and partially revert "scsi: qla2xxx: target: Fix offline port handling and host reset handling" at __qla2x00_abort_all_cmds.

CVSS metrics

5 scores · 4 sources · 2 versions

EPSS trend

Probability

0.50%

Chance of exploitation in the next 30 days

Percentile

43%

Versus all other CVEs

30-day change

Increase +0.13 pp

From 0.37% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Ubuntu158 products
  • linuxAll versions (No fix recorded) | < 6.17.0-22.22
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 6.17.0-1012.12
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian1 product
  • linuxAll versions (No fix recorded) | < 6.12.115-2 | < 6.18.3-1
Linux1 product
  • linux≥ aefed3e5548f28e5fecafda6604fcbc65484dbaa, < e87e9f92d7735895b7dd97f53dce6d95d08cf29c | ≥ aefed3e5548f28e5fecafda6604fcbc65484dbaa, < 0d0a1a267c1ee7c41aeffdca84afcb113787a91a | ≥ aefed3e5548f28e5fecafda6604fcbc65484dbaa, < c82c0fbb97d0fd44324eb55ab758408c7c964b32 | ≥ aefed3e5548f28e5fecafda6604fcbc65484dbaa, < 5c1fb3fd05da3d55b8cbc42d7d660b313cbdc936 | ≥ aefed3e5548f28e5fecafda6604fcbc65484dbaa, < d46c69a087aa3d1513f7a78f871b80251ea0c1ae | eb67b7a23d357f578578e737cb6412ae2384f352 | ec9639d92c1e10d4bc667e842753d85e21683d5c | e6e957f552d5b696879a31e5b0e2a9120e1ea86e | ≥ 4.9.316, < 4.10 | ≥ 4.14.281, < 4.15 | ≥ 4.19.245, < 4.20 | 5.2

3 vendors · 160 products

References

15 links
Show all 15 references