Double-Free Vulnerability in Linux Kernel Affecting SCSI Drivers
CVE-2025-38699

Currently unrated

Key Information:

Vendor: Linux
Status: Linux
Vendor: CVE Published:; 4 September 2025

What is CVE-2025-38699?

A flaw in the Linux kernel concerning SCSI drivers allows for a double-free vulnerability during device initialization and uninstallation. The issue arises in the bfad_im_probe() function, where failure to properly nullify the memory pointer leads to an attempt to free the same memory location twice. This can result in potential undefined behavior, application crashes, or exploitation by malicious actors. Proper modification necessitates setting the pointer to NULL after memory has been freed to mitigate risks during the driver lifecycle.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch