CVE-2025-39676

MEDIUM

MEDIUM Priority: 0.01 BB Relevance: 36/100

Published: 2025-09-05 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local

AC: Low

PR: Low

UI: None

S: Unchanged

C: None

I: None

A: High

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: qla4xxx: Prevent a potential error pointer dereference The qla4xxx_get_ep_fwdb() function is supposed to return NULL on error, but qla4xxx_ep_connect() returns error pointers. Propagating the error pointers will lead to an Oops in the caller, so change the error pointers to NULL.

Weakness Classification (1)

CWE-476

Affected Software (15)

Vendor	Product	Version
Linux	Linux	13483730a13bef372894aefcf73760f5c6c297be < d0225f41ee70611ca88ccb22c8542ecdfa7faea8
Linux	Linux	13483730a13bef372894aefcf73760f5c6c297be < ad8a9d38d30c691a77c456e72b78f7932d4f234d
Linux	Linux	13483730a13bef372894aefcf73760f5c6c297be < 325bf7d57c4e2a341e381c5805e454fb69dd78c3
Linux	Linux	13483730a13bef372894aefcf73760f5c6c297be < 46288d12d1c30d08fbeffd05abc079f57a43a2d4
Linux	Linux	13483730a13bef372894aefcf73760f5c6c297be < f5ad0819f902b4b33591791b92a0350fb3692a6b
Linux	Linux	13483730a13bef372894aefcf73760f5c6c297be < f1424c830d6ce840341aac33fe99c8ac45447ac1
Linux	Linux	13483730a13bef372894aefcf73760f5c6c297be < f4bc3cdfe95115191e24592bbfc15f1d4a705a75
Linux	Linux	13483730a13bef372894aefcf73760f5c6c297be < 9dcf111dd3e7ed5fce82bb108e3a3fc001c07225
Linux	Linux	3.2
debian	debian_linux	11.0
linux	linux_kernel	3.2.1 – 5.4.297
linux	linux_kernel	3.2
linux	linux_kernel	3.2
linux	linux_kernel	6.17
linux	linux_kernel	6.17