CVE-2025-21723: scsi: mpi3mr: Fix possible crash when setting up bsg fails

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-02-27 · updated 2026-10-30
Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix possible crash when setting up bsg fails If bsg_setup_queue() fails, the bsg_queue is assigned a non-NULL value. Consequently, in mpi3mr_bsg_exit(), the condition "if(!mrioc->bsg_queue)" will not be satisfied, preventing execution from entering bsg_remove_queue(), which could lead to the following crash: BUG: kernel NULL pointer dereference, address: 000000000000041c Call Trace: <TASK> mpi3mr_bsg_exit+0x1f/0x50 [mpi3mr] mpi3mr_remove+0x6f/0x340 [mpi3mr] pci_device_remove+0x3f/0xb0 device_release_driver_internal+0x19d/0x220 unbind_store+0xa4/0xb0 kernfs_fop_write_iter+0x11f/0x200 vfs_write+0x1fc/0x3e0 ksys_write+0x67/0xe0 do_syscall_64+0x38/0x80 entry_SYSCALL_64_after_hwframe+0x78/0xe2

Affected products

Linux kernel: from 5.19 before 6.12.13; from 6.13 before 6.13.2 — fixed in 6.12.13, 6.13.2
Linux: 5.19 — fixed in 6.14

How to fix

Upgrade to a fixed version: Linux kernel 6.12.13, 6.13.2; Linux 6.14. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2025-21723 or the next vulnerability affects your stack