CVE-2025-68745
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Clear cmds after chip reset Commit aefed3e5548f ("scsi: qla2xxx: target: Fix offline port handling and host rese...
Affects 1 product across 4 vendors.
A vulnerability in the Linux kernel's qla2xxx SCSI driver allows commands to get stuck and never freed after a chip reset, potentially leading to resource exhaustion and system instability.
BSID: BS-2025-GLOBAL-032704-I • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: MEDIUM
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2025-68745?
What is the CVSS score for CVE-2025-68745?
Is CVE-2025-68745 actively exploited?
How do I remediate CVE-2025-68745?
What systems are affected by CVE-2025-68745?
| CVE ID | CVE-2025-68745 |
|---|---|
| BSID | BS-2025-GLOBAL-032704-I BreachSpider Global ID |
| CVSS Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| Published | 2025-12-24 |
| Last Modified | 2026-10-16 |
| ICS Relevance | 0% |
| Source | NVD |
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Clear cmds after chip reset Commit aefed3e5548f ("scsi: qla2xxx: target: Fix offline port handling and host reset handling") caused two problems: 1. Commands sent to FW, after chip reset got stuck and never freed as FW is not going to respond to them anymore. 2. BUG_ON(cmd->sg_mapped) in qlt_free_cmd(). Commit 26f9ce53817a ("scsi: qla2xxx: Fix missed DMA unmap for aborted commands") attempted to fix this, but introduced another bug under different circumstances when two different CPUs were racing to call qlt_unmap_sg() at the same time: BUG_ON(!valid_dma_direction(dir)) in dma_unmap_sg_attrs(). So revert "scsi: qla2xxx: Fix missed DMA unmap for aborted commands" and partially revert "scsi: qla2xxx: target: Fix offline port handling and host reset handling" at __qla2x00_abort_all_cmds.
Source: NIST NVD / MITRE CVE Database
The vulnerability arises from improper handling of commands sent to the firmware after a chip reset. Commands are not cleared, leading to a memory leak and potential system instability.
Exploitation Likelihood: MEDIUM
| Vendor | Product | Affected Versions |
|---|---|---|
| Clear | — | — |
| Kernel | — | — |
| Linux | Linux | 5.2 ≥ 4.9.316, < 4.10 ≥ 4.14.281, < 4.15 ≥ 4.19.245, < 4.20 |
| Target | — | — |
No official vendor advisory link on record. See the CVE record →
| CISA known-exploited | Not in KEV catalog |
|---|---|
| Public Exploit | Not confirmed |
| PoC Code | Not confirmed |
AI Enrichment Record — provenance & audit hash
| Model | /workspace/models/qwen2.5-coder-32b-instruct-bf16 |
|---|---|
| Confidence | MEDIUM |
| Enriched At | 2026-05-24 |
| SHA-512 Audit Hash | 45362db4f7fb64d22a159137af157fd2746b1e05a63f00b6889084003e3b0a5199a154de38bc2b10b608a56f0fee415bcb85c9f14849b7d9468630fc280559ea |
Critical Severity - Know Your Exposure
A CVSS 9.8 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.
Create a free account →