CVE-2025-37826

scsi: ufs: core: Add NULL check in ufshcd_mcq_compl_pending_transfer()

Published: 5/8/2025 Last updated: 5/26/2025 Reserved: 4/16/2025

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Add NULL check in ufshcd_mcq_compl_pending_transfer() Add a NULL check for the returned hwq pointer by ufshcd_mcq_req_to_hwq(). This is similar to the fix in commit 74736103fb41 ("scsi: ufs: core: Fix ufshcd_abort_one racing issue").

CNA assigner: Linux (416baaa9-dc9f-4396-8d5f-8c081fb06d67) Requested by: n/a

Opam packages affected (26)

albatross cdrom conf-bpftool conf-linux-libc-dev core core_unix hvsock mirage-block-unix mm ocaml-probes orun rawlink rawlink-eio rawlink-lwt shell solo5 solo5-bindings-hvt solo5-bindings-spt solo5-cross-aarch64 solo5-kernel-ukvm tracy-client tuntap uring vhd-format vhd-format-lwt xapi-stdext-unix

Products affected (2)

Product	Vendor	Version
Linux	Linux	16.3.3
Linux	Linux	< 2025.01

References (3)

https://git.kernel.org/stable/c/eeab6618037be84e438e9d6ed5d9a53502faf81f
https://git.kernel.org/stable/c/700128d67d57bb1de4251e563ab85202def36c50
https://git.kernel.org/stable/c/08a966a917fe3d92150fa3cc15793ad5e57051eb