CVE-2025-21957
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Apr 1, 2025
Updated: Apr 11, 2025
CWE ID 476
Summary
CVE-2025-21957 is a vulnerability affecting the Linux kernel's scsi driver qla1280. When this driver is compiled with DEBUG_QLA1280 enabled and ql_debug_level set to a value greater than 2, a null dereference or oops exception occurs. The root cause is a mismatch in the interpretation of the variable 's' in the function 'sg_dma_len(s)' and 'sg_next(s)' during debug info printing. This issue has been resolved in the latest kernel updates.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.