Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

CVE-2025-71232

5.5 · MEDIUM
Published Feb 18, 2026 linux CWE-772

Overview

CVE-2025-71232 is a medium-severity vulnerability affecting linux linux_kernel. It was published on February 18, 2026 and has a CVSS 3.1 base score of 5.5 (MEDIUM).

This vulnerability has a CVSS 3.1 base score of 5.5, rated MEDIUM. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Free sp in error path to fix system crash

System crash seen during load/unload test in a loop,

[61110.449331] qla2xxx [0000:27:00.0]-0042:0: Disabled MSI-X.

[61110.467494] =============================================================================

[61110.467498] BUG qla2xxx_srbs (Tainted: G OE -------- --- ): Objects remaining in qla2xxx_srbs on __kmem_cache_shutdown()

[61110.467501] -----------------------------------------------------------------------------

[61110.467502] Slab 0x000000000ffc8162 objects=51 used=1 fp=0x00000000e25d3d85 flags=0x57ffffc0010200(slab|head|node=1|zone=2|lastcpupid=0x1fffff)

[61110.467509] CPU: 53 PID: 455206 Comm: rmmod Kdump: loaded Tainted: G OE -------- --- 5.14.0-284.11.1.el9_2.x86_64 #1

[61110.467513] Hardware name: HPE ProLiant DL385 Gen10 Plus v2/ProLiant DL385 Gen10 Plus v2, BIOS A42 08/17/2023

[61110.467515] Call Trace:

[61110.467

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

Vendor Product Versions Status
linux linux_kernel >= 4.16, < 5.10.251 Affected

References

Ref git.kernel.org/stable/c/05fcd590e5fbbb3e9e1b4fc6c23c98a1d38cf256 Ref git.kernel.org/stable/c/19ac050ef09a2f0a9d9787540f77bb45cf9033e8 Ref git.kernel.org/stable/c/7adbd2b7809066c75f0433e5e2a8e114b429f30f Ref git.kernel.org/stable/c/8e7597b4efee6143439641bc6522f247d585e060 Ref git.kernel.org/stable/c/aed16d37696f494288a291b4b477484ed0be774b Ref git.kernel.org/stable/c/b410ab8b9431d6d63d04caa1d69909fcc8b25eae Ref git.kernel.org/stable/c/b74408de1f2264220979f0c6a5a9d5e50b5b534b Ref git.kernel.org/stable/c/f04840512438ac025dea6e357d80a986b28bbe4c

Frequently Asked Questions

What is CVE-2025-71232?

CVE-2025-71232 is a medium-severity vulnerability affecting linux linux_kernel. It was published on February 18, 2026 and has a CVSS 3.1 base score of 5.5 (MEDIUM).

How severe is CVE-2025-71232?

This vulnerability has a CVSS 3.1 base score of 5.5, rated MEDIUM. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

How do I fix or remediate CVE-2025-71232?

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

How can CyberStrike help with CVE-2025-71232?

CyberStrike's AI-powered security agents can automatically detect CVE-2025-71232 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.

How CyberStrike Helps

Autonomous Discovery

AI agents map your attack surface to find vulnerabilities like this one.
Continuous Pentesting

Automated penetration testing that runs continuously, not just quarterly.
Code Review

AI-driven PR review catches vulnerable dependencies before they ship.
HackBrowser

Browser-based exploitation validates findings with real proof-of-concept.
Browse by year 2026