PT-2026-20441 · Qla2Xxx+1 · Qla2Xxx+1

Published 2025-01-01 · Updated 2026-04-20 · CVE-2025-71232

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.14.0-284.11.1.el9 2

Description The Linux kernel contains a flaw related to the qla2xxx SCSI driver. A system crash can occur during load/unload testing due to improper handling of memory allocation and deallocation within the driver, specifically when freeing spinlocks in an error path. This issue is triggered during the shutdown process of the qla2xxx module, leading to a kernel panic. The error message indicates that objects remain in the qla2xxx srbs slab cache when the cache is destroyed.

Recommendations Update the Linux kernel to version 5.14.0-284.11.1.el9 2 or later.

Exploit

Fix

Missing Release of Resource after Effective Lifetime

Weakness Enumeration

CWE-772

Related Identifiers

CVE-2025-71232

ECHO-C727-C01B-5D8C

OESA-2026-1566

OESA-2026-1567

OESA-2026-1570

OPENSUSE-SU-2026:10387-1

OPENSUSE-SU-2026:20416-1

SUSE-SU-2026:0962-1

SUSE-SU-2026:1081-1

SUSE-SU-2026:20667-1

SUSE-SU-2026:20720-1

SUSE-SU-2026:20838-1

SUSE-SU-2026:20845-1

SUSE-SU-2026:20876-1

SUSE-SU-2026:20931-1

SUSE-SU-2026:21284-1

Affected Products

Linux Kernel

Qla2Xxx

References · 1674

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/71xxx/CVE-2025-71232.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-23163 · Security Note
• https://git.kernel.org/stable/c/7adbd2b7809066c75f0433e5e2a8e114b429f30f · Patch
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2025-71232 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-68819 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23059 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23025 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23038 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23205 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2025-71232 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23228 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-40329 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-71235 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-71186 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23032 · Security Note