Linux Kernel Vulnerability in MPI3MR Driver Related to BSG Queue Management

CVE-2025-21723

Summary

A vulnerability within the MPI3MR driver of the Linux kernel can lead to a system crash due to improper handling of the BSG queue allocation. When the bsg_setup_queue() function fails, it incorrectly assigns a non-NULL value to the bsg_queue. This prevents the system from executing the necessary cleanup function (bsg_remove_queue()), which can result in a NULL pointer dereference during device removal, subsequently leading to a crash. Appropriate updates have been released to address this issue.

References