CVE-2025-71075

HIGH EPSS 2.6%
Published Jan 13, 20265mo ago · Modified Jun 17, 20261w ago
7.8 CVSS 3.1
High
Find Similar
Published Jan 13, 2026 5mo ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: aic94xx: fix use-after-free in device removal path The asd_pci_remove() function fails to synchronize with pending tasklets before freeing the asd_ha structure, leading to a potential use-after-free vulnerability. When a device removal is triggered (via hot-unplug or module unload), race condition can occur. The fix adds tasklet_kill() before freeing the asd_ha structure, ensuring all scheduled tasklets complete before cleanup proceeds.

CVSS Details

Base Score
7.8
Exploitability
1.8
Impact
5.9
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
2.6% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-416 Use After Free Memory Safety

Affected Products 15

VendorProductVersionRange
linuxlinux_kernel*≥2.6.19.1  –  <5.10.248
linuxlinux_kernel*≥5.11  –  <5.15.198
linuxlinux_kernel*≥5.16  –  <6.1.160
linuxlinux_kernel*≥6.2  –  <6.6.120
linuxlinux_kernel*≥6.7  –  <6.12.64
linuxlinux_kernel*≥6.13  –  <6.18.3
linuxlinux_kernel2.6.19any
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any

References 7

  • git.kernel.org https://git.kernel.org/stable/c/278455a82245a572aeb218a6212a416a98e418de
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/751c19635c2bfaaf2836a533caa3663633066dcf
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a41dc180b6e1229ae49ca290ae14d82101c148c3
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/b3e655e52b98a1d3df41c8e42035711e083099f8
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c8f6f88cd1df35155258285c4f43268b361819df
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e354793a7ab9bb0934ea699a9d57bcd1b48fc27b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f6ab594672d4cba08540919a4e6be2e202b60007
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/278455a82245a572aeb218a6212a416a98e418de
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/751c19635c2bfaaf2836a533caa3663633066dcf
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a41dc180b6e1229ae49ca290ae14d82101c148c3
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/b3e655e52b98a1d3df41c8e42035711e083099f8
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c8f6f88cd1df35155258285c4f43268b361819df
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e354793a7ab9bb0934ea699a9d57bcd1b48fc27b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f6ab594672d4cba08540919a4e6be2e202b60007
    Patch