CVE-2025-38699 Details
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: bfa: Double-free fix When the bfad_im_probe() function fails during initialization, the memory pointed to by bfad->im is freed without setting bfad->im to NULL. Subsequently, during driver uninstallation, when the state machine enters the bfad_sm_stopping state and calls the bfad_im_probe_undo() function, it attempts to free the memory pointed to by bfad->im again, thereby triggering a double-free vulnerability. Set bfad->im to NULL if probing fails.
A double-free vulnerability has been identified in the Linux kernel's SCSI BFA driver. This issue arises in the bfad_im_probe() function, where the memory referenced by bfad->im is freed without resetting bfad->im to NULL. During the driver uninstallation process, the state machine transitions to bfad_sm_stopping and invokes the bfad_im_probe_undo() function, which attempts to free the memory pointed to by bfad->im again. This sequence triggers the double-free vulnerability. The problem can be reproduced by causing the bfad_im_probe() function to fail during initialization, which leads to the improper memory management.
The vulnerability has been addressed by modifying the bfad_im_probe() function to set bfad->im to NULL if the probing process fails. Users should ensure they are running a version of the Linux kernel that includes this fix.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-415 | Double Free | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 2.6.33, < 5.4.297 >= 5.5, < 5.10.241 >= 5.11, < 5.15.190 >= 5.16, < 6.1.149 >= 6.2, < 6.6.103 >= 6.7, < 6.12.43 >= 6.13, < 6.15.11 >= 6.16, < 6.16.2 2.6.32 - 2.6.32 rc4 2.6.32 rc5 2.6.32 rc6 2.6.32 rc7 2.6.32 rc8 |
CPE
Remediation
| |
| debian debian linux | 11.0 |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Jun 17, 2026 | CVE Modified | siemens-SADP |
| May 12, 2026 | CVE Modified | siemens-SADP |
| Jan 7, 2026 | Initial Analysis | [email protected] |
| Nov 3, 2025 | CVE Modified | CVE |
| Sep 4, 2025 | New CVE Received | kernel.org |