CVE-2025-21723

Source
https://cve.org/CVERecord?id=CVE-2025-21723
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-21723.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-21723
Downstream
AZL (1)
BELL (1)
DEBIAN (1)
ECHO (1)
MINI (1)
OESA (3)
ROOT (3)
SUSE (8)
UBUNTU (1)
Related
Published
2025-02-27T02:07:30Z
Modified
2026-10-22T02:48:50Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
scsi: mpi3mr: Fix possible crash when setting up bsg fails
Details

In the Linux kernel, the following vulnerability has been resolved:

scsi: mpi3mr: Fix possible crash when setting up bsg fails

If bsg_setup_queue() fails, the bsg_queue is assigned a non-NULL value. Consequently, in mpi3mr_bsg_exit(), the condition "if(!mrioc->bsg_queue)" will not be satisfied, preventing execution from entering bsg_remove_queue(), which could lead to the following crash:

BUG: kernel NULL pointer dereference, address: 000000000000041c Call Trace: mpi3mr_bsg_exit+0x1f/0x50 [mpi3mr] mpi3mr_remove+0x6f/0x340 [mpi3mr] pci_device_remove+0x3f/0xb0 device_release_driver_internal+0x19d/0x220 unbind_store+0xa4/0xb0 kernfs_fop_write_iter+0x11f/0x200 vfs_write+0x1fc/0x3e0 ksys_write+0x67/0xe0 do_syscall_64+0x38/0x80 entry_SYSCALL_64_after_hwframe+0x78/0xe2

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21723.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
4268fa7513655a83d5492705591fdac6c65db48a
Fixed
bf66ec718e68767f6d463617adaf021963678803
Fixed
19b248069d1b1424982723a2bf3941ad864d5204
Fixed
832b8f95a2832321b8200ae478ed988b25faaef4
Fixed
295006f6e8c17212d3098811166e29627d19e05c

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-21723.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.19.0
Fixed
6.6.160
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.13
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.13.2

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-21723.json"