CVE-2025-38695
📋 TL;DR
A null pointer dereference vulnerability in the Linux kernel's lpfc SCSI driver could cause kernel panic or system crash when specific error conditions occur during Fibre Channel port initialization. This affects Linux systems using the lpfc driver for Emulex Fibre Channel host bus adapters. The vulnerability requires local access or ability to trigger the error condition.
💻 Affected Systems
- Linux kernel with lpfc driver
📦 What is this software?
Linux Kernel by Linux
The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...
Learn more about Linux Kernel →Linux Kernel by Linux
The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...
Learn more about Linux Kernel →Linux Kernel by Linux
The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...
Learn more about Linux Kernel →Linux Kernel by Linux
The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...
Learn more about Linux Kernel →Linux Kernel by Linux
The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...
Learn more about Linux Kernel →Linux Kernel by Linux
The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...
Learn more about Linux Kernel →Linux Kernel by Linux
The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...
Learn more about Linux Kernel →Linux Kernel by Linux
The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...
Learn more about Linux Kernel →⚠️ Risk & Real-World Impact
Worst Case
Kernel panic leading to system crash and denial of service, potentially causing data loss or service disruption.
Likely Case
System crash or kernel panic when specific error conditions occur during Fibre Channel adapter initialization.
If Mitigated
No impact if the error condition doesn't occur or if the system has proper kernel hardening protections.
🎯 Exploit Status
Exploitation requires triggering specific error conditions during hardware initialization, making reliable exploitation challenging.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: Linux kernel with commit 46a0602c24d7d425dd8e00c749cd64a934aac7ec or later
Vendor Advisory: https://git.kernel.org/stable/c/46a0602c24d7d425dd8e00c749cd64a934aac7ec
Restart Required: No
Instructions:
1. Update Linux kernel to version containing the fix commit 2. Rebuild kernel if using custom kernel 3. Load updated lpfc module
🔧 Temporary Workarounds
Disable lpfc driver
allPrevent loading of vulnerable lpfc driver if Fibre Channel functionality is not required
echo 'blacklist lpfc' >> /etc/modprobe.d/blacklist.conf
rmmod lpfc
🧯 If You Can't Patch
- Avoid triggering Fibre Channel adapter initialization errors
- Implement kernel hardening features like KASAN to detect null pointer dereferences
🔍 How to Verify
Check if Vulnerable:
Check if system uses lpfc driver: lsmod | grep lpfc && check kernel version against patched versionsCheck Version:
uname -rVerify Fix Applied:
Verify kernel contains fix commit: git log --oneline | grep '46a0602c24d7d425dd8e00c749cd64a934aac7ec'📡 Detection & Monitoring
Log Indicators:
- Kernel panic messages
- NULL pointer dereference in kernel logs
- lpfc driver error messages during initialization
Network Indicators:
- Fibre Channel connectivity issues
SIEM Query:
source="kernel" AND ("NULL pointer dereference" OR "kernel panic" OR "lpfc")🔗 References
- https://git.kernel.org/stable/c/46a0602c24d7d425dd8e00c749cd64a934aac7ec
- https://git.kernel.org/stable/c/571617f171f723b05f02d154a2e549a17eab4935
- https://git.kernel.org/stable/c/5e25ee1ecec91c61a8acf938ad338399cad464de
- https://git.kernel.org/stable/c/6698796282e828733cde3329c887b4ae9e5545e9
- https://git.kernel.org/stable/c/6711ce7e9de4eb1a541ef30638df1294ea4267f8
- https://git.kernel.org/stable/c/74bdf54a847dab209d2a8f65852f59b7fa156175
- https://git.kernel.org/stable/c/7925dd68807cc8fd755b04ca99e7e6f1c04392e8
- https://git.kernel.org/stable/c/add68606a01dcccf18837a53e85b85caf0693b4b
- https://git.kernel.org/stable/c/d3f55f46bb37a8ec73bfe3cfe36e3ecfa2945dfa
- https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
