EUVD-2025-20959

Malicious code in bioql PyPI...

The vulnerability of the dev_loss_tmo_callbk() function in the drivers/scsi/lpfc/lpfc_hbadisc.c module of the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the devlosstmocallbk function in the drivers/scsi/lpfc/lpfchbadisc.c module of the Linux kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-38289: Use After Free

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Avoid potential ndlp use-after-free in devlosstmocallbk Smatch detected a potential use-after-free of an ndlp oject in devlosstmocallbk during driver unload or fatal error handling. Fix by reordering code to avoid...