CVE-2025-37981: scsi: smartpqi: Use is_kdump_kernel() to check for kdump

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-05-20 · updated 2026-06-17
Weakness: CWE-787

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Use is_kdump_kernel() to check for kdump The smartpqi driver checks the reset_devices variable to determine whether special adjustments need to be made for kdump. This has the effect that after a regular kexec reboot, some driver parameters such as max_transfer_size are much lower than usual. More importantly, kexec reboot tests have revealed memory corruption caused by the driver log being written to system memory after a kexec. Fix this by testing is_kdump_kernel() rather than reset_devices where appropriate.

Affected products

Linux kernel: from 6.12 before 6.12.25; from 6.13 before 6.14.4; 6.15-rc1, 6.15-rc2 — fixed in 6.12.25, 6.14.4

How to fix

Upgrade to a fixed version: Linux kernel 6.12.25, 6.14.4. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2025-37981 or the next vulnerability affects your stack