CVE-2025-68745: 
Linux Kernel vulnerability analysis and mitigation

CVE-2025-68745 is a Linux kernel vulnerability in the scsi: qla2xxx driver related to improper command cleanup after a chip reset. The flaw stems from a prior commit (aefed3e5548f) that caused commands sent to firmware after a chip reset to become stuck and never freed, and a subsequent fix (26f9ce53817a) that introduced a race condition between two CPUs calling qlt_unmap_sg() simultaneously, triggering BUG_ON(!valid_dma_direction(dir)) in dma_unmap_sg_attrs(). The vulnerability affects the Linux kernel starting from version 5.2 up to the fix commits. It was published on December 24, 2025, with a CVSS estimate of Medium severity and an EPSS score of 0.00018 (Feedly, EUVD).

The root cause is a use-after-free / double-unmap race condition (related to CWE-362: Concurrent Execution Using Shared Resource with Improper Synchronization) in the qla2xxx SCSI target driver's command abort path. After a chip reset, commands previously submitted to firmware are never reclaimed because the firmware will not respond to them; the partial fix introduced a scenario where two CPUs could concurrently invoke qlt_unmap_sg() on the same command, causing a kernel BUG assertion (BUG_ON(!valid_dma_direction(dir))) in dma_unmap_sg_attrs(). The resolution involved reverting commit 26f9ce53817a ("Fix missed DMA unmap for aborted commands") and partially reverting commit aefed3e5548f at __qla2x00_abort_all_cmds to properly clear commands after chip reset (Feedly). Fix commits are 5c1fb3fd05da and d46c69a087aa in the stable kernel tree (kernel.org stable).

Successful triggering of this vulnerability can cause a kernel panic (BUG_ON assertion failure) in the qla2xxx SCSI driver, resulting in a system crash and denial of service on affected hosts. Systems using QLogic Fibre Channel HBAs (qla2xxx driver) in storage or SAN environments are at risk of losing access to storage targets during or after a chip reset event. There is no evidence of confidentiality or integrity impact; the primary consequence is availability loss due to kernel crash (Feedly).

The Linux kernel maintainers have addressed this vulnerability by reverting the problematic commits in the stable tree; fix commits 5c1fb3fd05da and d46c69a087aa are available in the kernel stable repository. Patched versions include Linux kernel 6.18.2 and 6.19-rc1 and later. Ubuntu has issued security notices USN-8177-1, USN-8177-2, USN-8183-1, USN-8183-2, USN-8245-1, and USN-8257-1 addressing this CVE. Administrators should update their Linux kernel packages to the latest patched version provided by their distribution (Ubuntu USN-8177-1, Ubuntu USN-8183-1, kernel.org stable).

The vulnerability received routine coverage from Linux security aggregators and distribution security teams, with Ubuntu, SUSE, and Debian issuing advisories. No notable researcher commentary or significant social media discussion beyond automated CVE tracking was observed (Ubuntu USN-8177-1).