IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2025-12-24 13:16

MODIFIED

2025-12-24 13:16

EPSS (Prob. Exploit)

0.43%

Top 62.5%

DATA SOURCES:

NVD 🔗 2025-12-24 RED HAT 🔗 2025-12-28 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-11-08 OSV 🔗 2026-11-08 MSRC 🔗 2026-11-02

> DESCRIPTION

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix improper freeing of purex item In qla2xxx_process_purls_iocb(), an item is allocated via qla27xx_copy_multiple_pkt(), which internally calls qla24xx_alloc_purex_item(). The qla24xx_alloc_purex_item() function may return a pre-allocated item from a per-adapter pool for small allocations, instead of dynamically allocating memory with kzalloc(). An error handling path in qla2xxx_process_purls_iocb() incorrectly uses kfree() to release the item. If the item was from the pre-allocated pool, calling kfree() on it is a bug that can lead to memory corruption. Fix this by using the correct deallocation function, qla24xx_free_purex_item(), which properly handles both dynamically allocated and pre-allocated items.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> RED HAT SECURITY ADVISORIES

RHSA-2026:8921 IMPORTANT

Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (C...

RHSA-2026:9131 IMPORTANT

Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (C...

RHSA-2026:9135 IMPORTANT

Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System...

RHSA-2026:9264 IMPORTANT

Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (...

RHSA-2026:10996 IMPORTANT

Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vuln...

RHSA-2026:14339 IMPORTANT

Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulne...

RHSA-2026:19569 IMPORTANT

Red Hat Security Advisory: kernel security update

RHSA-2026:19568 IMPORTANT

Red Hat Security Advisory: kernel security update

RHSA-2026:21209 IMPORTANT

Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulne...

> RED HAT SEVERITY ASSESSMENT

THREAT SEVERITY

Low

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

scsi: qla2xxx: Fix improper freeing of purex item

AFFECTED PACKAGES:

Unknown / Unknown

Linux / Kernel

> HISTORIQUE DES MODIFICATIONS

Première apparition

24/12/2025 13:16

Source: NVD

📊 ENRICHISSEMENT 19/01/2026 17:38

CVEPROJECT

Champ modifié: CVE Project

Ancienne valeur:

Non

Nouvelle valeur:

Oui

📊 ENRICHISSEMENT 28/12/2025 04:01

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Low" }

Nouvelle valeur:

{ "threat_severity": "Low", "severity_scale": null }

📊 ENRICHISSEMENT 25/12/2025 23:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Low" }

Nouvelle valeur:

{ "threat_severity": "Low", "severity_scale": null }

📊 ENRICHISSEMENT 25/12/2025 22:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Low" }

Nouvelle valeur:

{ "threat_severity": "Low", "severity_scale": null }

📊 ENRICHISSEMENT 25/12/2025 21:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Low" }

Nouvelle valeur:

{ "threat_severity": "Low", "severity_scale": null }

📊 ENRICHISSEMENT 25/12/2025 20:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Low" }

Nouvelle valeur:

{ "threat_severity": "Low", "severity_scale": null }

📊 ENRICHISSEMENT 25/12/2025 19:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Low" }

Nouvelle valeur:

{ "threat_severity": "Low", "severity_scale": null }

📊 ENRICHISSEMENT 25/12/2025 18:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Low" }

Nouvelle valeur:

{ "threat_severity": "Low", "severity_scale": null }

📊 ENRICHISSEMENT 25/12/2025 17:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Low" }

Nouvelle valeur:

{ "threat_severity": "Low", "severity_scale": null }

📊 ENRICHISSEMENT 25/12/2025 16:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Low" }

Nouvelle valeur:

{ "threat_severity": "Low", "severity_scale": null }

📊 ENRICHISSEMENT 25/12/2025 15:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Low" }

Nouvelle valeur:

{ "threat_severity": "Low", "severity_scale": null }

📊 ENRICHISSEMENT 25/12/2025 14:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Low" }

Nouvelle valeur:

{ "threat_severity": "Low", "severity_scale": null }

📊 ENRICHISSEMENT 25/12/2025 13:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Low" }

Nouvelle valeur:

{ "threat_severity": "Low", "severity_scale": null }

📊 ENRICHISSEMENT 25/12/2025 12:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

N/A

Nouvelle valeur:

{ "threat_severity": "Low", "severity_scale": null }

📊 ENRICHISSEMENT 25/12/2025 12:30

REDHAT

Champ modifié: Red Hat

Ancienne valeur:

Non

Nouvelle valeur:

Oui

Total des modifications: 15 Dernière mise à jour: 9 months ago

> REFERENCES

https://git.kernel.org/stable/c/5fa1c8226b4532ad7011d295d3ab4ad45df105ae

https://git.kernel.org/stable/c/78b1a242fe612a755f2158fd206ee6bb577d18ca

https://git.kernel.org/stable/c/8e9f0a0717ba31d5842721627ade1e62d7aec012

https://git.kernel.org/stable/c/cfe3e2f768d248fd3d965d561d0768a56dd0b9f8

« BACK_TO_HOME

> CVE-2025-68741

> DESCRIPTION

> AFFECTED_PRODUCTS

> RED HAT SECURITY ADVISORIES

> RED HAT SEVERITY ASSESSMENT

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

> HISTORIQUE DES MODIFICATIONS

> REFERENCES