---
id: CVE-2025-68745
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  scsi: qla2xxx: Clear cmds after chip reset

  Commit aefed3e5548f ("scsi: qla2xxx: target: Fix offline port handling
  and host reset handling") caused two problems:

  1
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  scsi: qla2xxx: Clear cmds after chip reset

  Commit aefed3e5548f ("scsi: qla2xxx: target: Fix offline port handling
  and host reset handling") caused two problems:

  1. Co…
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
published: '2025-12-24'
updated: '2026-10-13'
sourceUpdated: '2026-10-13T10:10:00.193'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-68745'
references:
  - url: 'https://git.kernel.org/stable/c/5c1fb3fd05da3d55b8cbc42d7d660b313cbdc936'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/d46c69a087aa3d1513f7a78f871b80251ea0c1ae'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
epss: 0.00369
epssPercentile: 0.28812
ingestedAt: '2026-10-13T10:22:03.519Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Clear cmds after chip reset

Commit aefed3e5548f ("scsi: qla2xxx: target: Fix offline port handling
and host reset handling") caused two problems:

1. Commands sent to FW, after chip reset got stuck and never freed as FW
   is not going to respond to them anymore.

2. BUG_ON(cmd->sg_mapped) in qlt_free_cmd().  Commit 26f9ce53817a
   ("scsi: qla2xxx: Fix missed DMA unmap for aborted commands")
   attempted to fix this, but introduced another bug under different
   circumstances when two different CPUs were racing to call
   qlt_unmap_sg() at the same time: BUG_ON(!valid_dma_direction(dir)) in
   dma_unmap_sg_attrs().

So revert "scsi: qla2xxx: Fix missed DMA unmap for aborted commands" and
partially revert "scsi: qla2xxx: target: Fix offline port handling and
host reset handling" at __qla2x00_abort_all_cmds.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.