{"id":"CVE-2025-68371","revision":"526eb48b4ba846ecaa4d656cea823880","records":[{"revision":"526eb48b4ba846ecaa4d656cea823880","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2025-68371","aliases":[],"title":"scsi: smartpqi: Fix device resources accessed after device removal","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: smartpqi: Fix device resources accessed after device removal\n\nCorrect possible race conditions during device removal.\n\nPreviously, a scheduled work item to reset a LUN could still execute\nafter the device was removed, leading to use-after-free and other\nresource access issues.\n\nThis race condition occurs because the abort handler may schedule a LUN\nreset concurrently with device removal via sdev_destroy(), leading to\nuse-after-free and improper access to freed resources.\n\n  - Check in the device reset handler if the device is still present in\n    the controller's SCSI device list before running; if not, the reset\n    is skipped.\n\n  - Cancel any pending TMF work that has not started in sdev_destroy().\n\n  - Ensure device freeing in sdev_destroy() is done while holding the\n    LUN reset mutex to avoid races with ongoing resets.","state":0,"publishedAt":"2025-12-24T10:33:01.896+00:00","modifiedAt":"2026-10-15T01:09:57.741+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/scsi/smartpqi/smartpqi_init.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"2d80f4054f7f901b8ad97358a9069616ac8524c7\",\n                            \"lessThan\": \"7dfa5a5516ec3c6b9b6c22ee18f0eb2df3f38ef2\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"2d80f4054f7f901b8ad97358a9069616ac8524c7\",\n                            \"lessThan\": \"6d2390653d82cad0e1ba2676e536dd99678f6ef1\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"2d80f4054f7f901b8ad97358a9069616ac8524c7\",\n                            \"lessThan\": \"eccc02ba1747501d92bb2049e3ce378ba372f641\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"2d80f4054f7f901b8ad97358a9069616ac8524c7\",\n                            \"lessThan\": \"4e1acf1b6dd6dd0495bda139daafd7a403ae2dc1\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"2d80f4054f7f901b8ad97358a9069616ac8524c7\",\n                            \"lessThan\": \"1a5c5a2f88e839af5320216a02ffb075b668596a\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"2d80f4054f7f901b8ad97358a9069616ac8524c7\",\n                            \"lessThan\": \"b518e86d1a70a88f6592a7c396cf1b93493d1aab\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/scsi/smartpqi/smartpqi_init.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.0\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.0\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.160\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.120\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.63\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.17.13\",\n                            \"lessThanOrEqual\": \"6.17.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.2\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.19\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/7dfa5a5516ec3c6b9b6c22ee18f0eb2df3f38ef2","https://git.kernel.org/stable/c/6d2390653d82cad0e1ba2676e536dd99678f6ef1","https://git.kernel.org/stable/c/eccc02ba1747501d92bb2049e3ce378ba372f641","https://git.kernel.org/stable/c/4e1acf1b6dd6dd0495bda139daafd7a403ae2dc1","https://git.kernel.org/stable/c/1a5c5a2f88e839af5320216a02ffb075b668596a","https://git.kernel.org/stable/c/b518e86d1a70a88f6592a7c396cf1b93493d1aab"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-68371","license":"CVE Program Terms of Use","key":"cve-program:CVE-2025-68371","identifiers":["CVE-2025-68371"]},"retained":false,"historicalAffected":[]}],"coverage":[]}