Memory Corruption Vulnerability in Linux Kernel's Smartpqi Driver

CVE-2025-37981

What is CVE-2025-37981?

A vulnerability in the smartpqi driver of the Linux kernel has been identified, which affects the proper functioning of kexec reboots. The driver currently relies on the reset_devices variable, leading to inappropriate adjustments in parameters like max_transfer_size after rebooting. This has resulted in memory corruption when the driver log writes to system memory post-kexec. A solution is provided by implementing checks using is_kdump_kernel() instead, ensuring appropriate behavior during kexec operations and preventing these critical issues.

References