Answer in brief
CVE-2025-38700 records a Medium severity (CVSS 5.5) vulnerability in scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC CN 4100 (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 5.5. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC CN 4100 (generic). Check affected ranges and fixed versions before updating.
| Product | Affected versions | Fixed versions |
|---|---|---|
| cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | Not reported | Not reported |
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=5d91e209fb21fb9cc765729d4c6a85a9fb6c9187 <f53af99f441ee79599d8df6113a7144d74cf9153 || >=5d91e209fb21fb9cc765729d4c6a85a9fb6c9187 <9ea6d961566c7d762ed0204b06db05756fdda3b6 || >=5d91e209fb21fb9cc765729d4c6a85a9fb6c9187 <fd5aad080edb501ab5c84b7623d612d0e3033403 || >=5d91e209fb21fb9cc765729d4c6a85a9fb6c9187 <a145c269dc5380c063a20a0db7e6df2995962e9d || >=5d91e209fb21fb9cc765729d4c6a85a9fb6c9187 <66a373f50b4249d57f5a88c7be9676f9d5884865 || >=5d91e209fb21fb9cc765729d4c6a85a9fb6c9187 <35782c32528d82aa21f84cb5ceb2abd3526a8159 || >=5d91e209fb21fb9cc765729d4c6a85a9fb6c9187 <a33d42b7fc24fe03f239fbb0880dd5b4b4b97c19 || >=5d91e209fb21fb9cc765729d4c6a85a9fb6c9187 <2b242ea14386a510010eabfbfc3ce81a101f3802 || >=5d91e209fb21fb9cc765729d4c6a85a9fb6c9187 <3ea3a256ed81f95ab0f3281a0e234b01a9cae605 | f53af99f441ee79599d8df6113a7144d74cf9153, 9ea6d961566c7d762ed0204b06db05756fdda3b6, fd5aad080edb501ab5c84b7623d612d0e3033403, a145c269dc5380c063a20a0db7e6df2995962e9d, 66a373f50b4249d57f5a88c7be9676f9d5884865, 35782c32528d82aa21f84cb5ceb2abd3526a8159, a33d42b7fc24fe03f239fbb0880dd5b4b4b97c19, 2b242ea14386a510010eabfbfc3ce81a101f3802, 3ea3a256ed81f95ab0f3281a0e234b01a9cae605 |
| Linux/Linuxgeneric | 2.6.27 | Not reported |
| Siemens/SIMATIC CN 4100generic | >=0 <V5.0 | V5.0 |
Published upstream
Sep 4, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Nov 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 28, 2026
In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated In case of an ib_fast_reg_mr allocation failure during iSER setup, the machine hits a panic because iscsi_conn->dd_data is initialized unconditionally, even when no memory is allocated (dd_size == 0). This leads invalid pointer dereference during connection teardown. Fix by setting iscsi_conn->dd_data only if memory is actually allocated. Panic trace: ------------ iser: iser_create_fastreg_desc: Failed to allocate ib_fast_reg_mr err=-12 iser: iser_alloc_rx_descriptors: failed allocating rx descriptors / data buffers BUG: unable to handle page fault for address: fffffffffffffff8 RIP: 0010:swake_up_locked.part.5+0xa/0x40 Call Trace: complete+0x31/0x40 iscsi_iser_conn_stop+0x88/0xb0 [ib_iser] iscsi_stop_conn+0x66/0xc0 [scsi_transport_iscsi] iscsi_if_stop_conn+0x14a/0x150 [scsi_transport_iscsi] iscsi_if_rx+0x1135/0x1834 [scsi_transport_iscsi] ? netlink_lookup+0x12f/0x1b0 ? netlink_deliver_tap+0x2c/0x200 netlink_unicast+0x1ab/0x280 netlink_sendmsg+0x257/0x4f0 ? _copy_from_user+0x29/0x60 sock_sendmsg+0x5f/0x70
Quoted source text, attributed separately from HOL analysis.