CVE - CVE-2025-38075

CVE-ID
CVE-2025-38075	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix timeout on deleted connection NOPIN response timer may expire on a deleted connection and crash with such logs: Did not receive response to NOPIN on CID: 0, failing connection for I_T Nexus (null),i,0x00023d000125,iqn.2017-01.com.iscsi.target,t,0x3d BUG: Kernel NULL pointer dereference on read at 0x00000000 NIP strlcpy+0x8/0xb0 LR iscsit_fill_cxn_timeout_err_stats+0x5c/0xc0 [iscsi_target_mod] Call Trace: iscsit_handle_nopin_response_timeout+0xfc/0x120 [iscsi_target_mod] call_timer_fn+0x58/0x1f0 run_timer_softirq+0x740/0x860 __do_softirq+0x16c/0x420 irq_exit+0x188/0x1c0 timer_interrupt+0x184/0x410 That is because nopin response timer may be re-started on nopin timer expiration. Stop nopin timer before stopping the nopin response timer to be sure that no one of them will be re-started.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/019ca2804f3fb49a7f8e56ea6aeaa1ff32724c27 URL:https://git.kernel.org/stable/c/019ca2804f3fb49a7f8e56ea6aeaa1ff32724c27 MISC:https://git.kernel.org/stable/c/2c5081439c7ab8da08427befe427f0d732ebc9f9 URL:https://git.kernel.org/stable/c/2c5081439c7ab8da08427befe427f0d732ebc9f9 MISC:https://git.kernel.org/stable/c/3e6429e3707943078240a2c0c0b3ee99ea9b0d9c URL:https://git.kernel.org/stable/c/3e6429e3707943078240a2c0c0b3ee99ea9b0d9c MISC:https://git.kernel.org/stable/c/571ce6b6f5cbaf7d24af03cad592fc0e2a54de35 URL:https://git.kernel.org/stable/c/571ce6b6f5cbaf7d24af03cad592fc0e2a54de35 MISC:https://git.kernel.org/stable/c/6815846e0c3a62116a7da9740e3a7c10edc5c7e9 URL:https://git.kernel.org/stable/c/6815846e0c3a62116a7da9740e3a7c10edc5c7e9 MISC:https://git.kernel.org/stable/c/7f533cc5ee4c4436cee51dc58e81dfd9c3384418 URL:https://git.kernel.org/stable/c/7f533cc5ee4c4436cee51dc58e81dfd9c3384418 MISC:https://git.kernel.org/stable/c/87389bff743c55b6b85282de91109391f43e0814 URL:https://git.kernel.org/stable/c/87389bff743c55b6b85282de91109391f43e0814 MISC:https://git.kernel.org/stable/c/fe8421e853ef289e1324fcda004751c89dd9c18a URL:https://git.kernel.org/stable/c/fe8421e853ef289e1324fcda004751c89dd9c18a
Assigning CNA
kernel.org
Date Record Created
20250416	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250416)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)