Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

CVE-2025-71238

7.8 · HIGH
Published Mar 4, 2026 linux CWE-415

Overview

CVE-2025-71238 is a high-severity vulnerability affecting linux linux_kernel. It was published on March 4, 2026 and has a CVSS 3.1 base score of 7.8 (HIGH).

This vulnerability has a CVSS 3.1 base score of 7.8, rated HIGH. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Fix bsg_done() causing double free

Kernel panic observed on system,

[5353358.825191] BUG: unable to handle page fault for address: ff5f5e897b024000

[5353358.825194] #PF: supervisor write access in kernel mode

[5353358.825195] #PF: error_code(0x0002) - not-present page

[5353358.825196] PGD 100006067 P4D 0

[5353358.825198] Oops: 0002 [#1] PREEMPT SMP NOPTI

[5353358.825200] CPU: 5 PID: 2132085 Comm: qlafwupdate.sub Kdump: loaded Tainted: G W L ------- --- 5.14.0-503.34.1.el9_5.x86_64 #1

[5353358.825203] Hardware name: HPE ProLiant DL360 Gen11/ProLiant DL360 Gen11, BIOS 2.44 01/17/2025

[5353358.825204] RIP: 0010:memcpy_erms+0x6/0x10

[5353358.825211] RSP: 0018:ff591da8f4f6b710 EFLAGS: 00010246

[5353358.825212] RAX: ff5f5e897b024000 RBX: 0000000000007090 RCX: 0000000000001000

[5353358.825213] RDX: 0000000000001000 RSI: ff591da8f4fed090 RDI: ff5f5e897b024000

[5353358.825214] RBP: 0000000000010

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

Vendor Product Versions Status
linux linux_kernel >= 5.7, < 5.10.251 Affected

References

Ref git.kernel.org/stable/c/057a5bdc481e58ab853117254867ffb22caf9f6e Ref git.kernel.org/stable/c/27ac9679c43a09e54e2d9aae9980ada045b428e0 Ref git.kernel.org/stable/c/31f33b856d2324d86bcaef295f4d210477a1c018 Ref git.kernel.org/stable/c/708003e1bc857dd014d4c44278d7d77c26f91b1c Ref git.kernel.org/stable/c/74e7458537cd9349cf019862e51491f670871707 Ref git.kernel.org/stable/c/871f6236da96c4a9712b8a29d7f555f767a47e95 Ref git.kernel.org/stable/c/c2c68225b1456f4d0d393b5a8778d51bb0d5b1d0 Ref git.kernel.org/stable/c/f2bbb4db0e4a4fbd5e649c0b5d8733f61da24720

Frequently Asked Questions

What is CVE-2025-71238?

CVE-2025-71238 is a high-severity vulnerability affecting linux linux_kernel. It was published on March 4, 2026 and has a CVSS 3.1 base score of 7.8 (HIGH).

How severe is CVE-2025-71238?

This vulnerability has a CVSS 3.1 base score of 7.8, rated HIGH. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

How do I fix or remediate CVE-2025-71238?

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

How can CyberStrike help with CVE-2025-71238?

CyberStrike's AI-powered security agents can automatically detect CVE-2025-71238 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.

How CyberStrike Helps

Autonomous Discovery

AI agents map your attack surface to find vulnerabilities like this one.
Continuous Pentesting

Automated penetration testing that runs continuously, not just quarterly.
Code Review

AI-driven PR review catches vulnerable dependencies before they ship.
HackBrowser

Browser-based exploitation validates findings with real proof-of-concept.
Browse by year 2026