PT-2025-53011 · Qla2Xxx+4 · Qla2Xxx+4

Published

2025-12-24

·

Updated

2026-05-07

·

CVE-2025-68745

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fix included in commit aefed3e5548f
Description The Linux kernel contains an issue within the qla2xxx SCSI driver related to command handling after a chip reset. A previous commit (aefed3e5548f) introduced problems where commands sent to the firmware after a chip reset would become stuck and not be freed, as the firmware would not respond to them. A subsequent attempt to address this (commit 26f9ce53817a) introduced a bug involving concurrent access to qlt unmap sg() from multiple CPUs, leading to a kernel panic. The resolution involves reverting the problematic commit (26f9ce53817a) and partially reverting the initial commit (aefed3e5548f) specifically within the qla2x00 abort all cmds function.
Recommendations Update the Linux kernel to a version that includes the fix for this issue, specifically the commit aefed3e5548f.

Exploit

Related Identifiers

AZL-73087
CVE-2025-68745
ECHO-927A-8A19-56AC
OESA-2026-1075
OESA-2026-1076
OESA-2026-1759
OESA-2026-1760
OESA-2026-1761
OPENSUSE-SU-2026:10039-1
OPENSUSE-SU-2026:10301-1
OPENSUSE-SU-2026:20416-1
SUSE-SU-2026:20838-1
SUSE-SU-2026:20931-1
SUSE-SU-2026:21284-1
USN-8177-1
USN-8177-2
USN-8183-1
USN-8183-2
USN-8245-1
USN-8257-1

Affected Products

Debian
Linuxmint
Linux Kernel
Ubuntu
Qla2Xxx