CVE-2025-21723 scsi: mpi3mr: Fix possible crash when setting up bsg fails
A local attacker can trigger a kernel crash in the mpi3mr driver by causing a bsg setup failure, leading to a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-21723?
CVE-2025-21723 is a medium-severity vulnerability in Linux kernel, published on 27 Feb 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
scsi: mpi3mr: Fix possible crash when setting up bsg fails
If bsg_setup_queue() fails, the bsg_queue is assigned a non-NULL value. Consequently, in mpi3mr_bsg_exit(), the condition "if(!mrioc->bsg_queue)" will not be satisfied, preventing execution from entering bsg_remove_queue(), which could lead to the following crash:
BUG: kernel NULL pointer dereference, address: 000000000000041c Call Trace: <TASK> mpi3mr_bsg_exit+0x1f/0x50 [mpi3mr] mpi3mr_remove+0x6f/0x340 [mpi3mr] pci_device_remove+0x3f/0xb0 device_release_driver_internal+0x19d/0x220 unbind_store+0xa4/0xb0 kernfs_fop_write_iter+0x11f/0x200 vfs_write+0x1fc/0x3e0 ksys_write+0x67/0xe0 do_syscall_64+0x38/0x80 entry_SYSCALL_64_after_hwframe+0x78/0xe2
Weakness: CWE-476
Which versions are affected by CVE-2025-21723?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2025-21723?
Apply the vendor's patch.
Is CVE-2025-21723 being exploited?
There is no known exploitation of CVE-2025-21723 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-57982, BELL-CVE-2025-21723, DEBIAN-CVE-2025-21723, GHSA-79h6-f389-cqgv, ROOT-OS-DEBIAN-12-CVE-2025-21723, ROOT-OS-UBUNTU-2204-CVE-2025-21723 and 2 more.