01 Record

CVE-2025-38399

scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()

HighPUBLISHEDCNA: Linux

CNA base score7.5 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

View raw JSON

02 Description

scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.42% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 35.2% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-07-30.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-07-25 12:53Z1 YR AGO

Last updated

2026-08-05 12:01Z1 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.5)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-476NULL Pointer DereferenceBase
CWE-754Improper Check for Unusual or Exceptional ConditionsClass

Data version

5.2

Document digest

16b25fbfb6453850e76a0e91e934cd6fa9867fbfb82b923bdb3f67f0b50f06c9

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxf32ba612ef0f8eecaf6d2a5b04076ee7ea9ed039 to < 70ddb8133fdb512d4b1f2b4fd1c9e518514f182c, f32ba612ef0f8eecaf6d2a5b04076ee7ea9ed039 to < 1129e0e0a833acf90429e0f13951068d5f026e4f, f32ba612ef0f8eecaf6d2a5b04076ee7ea9ed039 to < 1627dda4d70ceb1ba62af2e401af73c09abb1eb5, f32ba612ef0f8eecaf6d2a5b04076ee7ea9ed039 to < 55dfffc5e94730370b08de02c0cf3b7c951bbe9e, f32ba612ef0f8eecaf6d2a5b04076ee7ea9ed039 to < 7296c938df2445f342be456a6ff0b3931d97f4e5, f32ba612ef0f8eecaf6d2a5b04076ee7ea9ed039 to < c412185d557578d3f936537ed639c4ffaaed4075, f32ba612ef0f8eecaf6d2a5b04076ee7ea9ed039 to < d8ab68bdb294b09a761e967dad374f2965e1913f, 5.9—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/70ddb8133fdb512d4b1f2b4fd1c9e518514f182c
git.kernel.orghttps://git.kernel.org/stable/c/1129e0e0a833acf90429e0f13951068d5f026e4f
git.kernel.orghttps://git.kernel.org/stable/c/1627dda4d70ceb1ba62af2e401af73c09abb1eb5
git.kernel.orghttps://git.kernel.org/stable/c/55dfffc5e94730370b08de02c0cf3b7c951bbe9e
git.kernel.orghttps://git.kernel.org/stable/c/7296c938df2445f342be456a6ff0b3931d97f4e5
git.kernel.orghttps://git.kernel.org/stable/c/c412185d557578d3f936537ed639c4ffaaed4075
git.kernel.orghttps://git.kernel.org/stable/c/d8ab68bdb294b09a761e967dad374f2965e1913f
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00007.html

01 Record index

CVE-2025-38399

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-38399

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References