CVE-2025-71075

A use-after-free flaw was found in the Linux kernel's AIC-94xx SAS/SATA controller driver. The asd_pci_remove() function frees the asd_ha structure without first synchronizing pending tasklets. If a tasklet is scheduled but not yet executed when the structure is freed, the tasklet will access freed memory, causing a kernel crash or corruption.

This can be triggered during PCI hot-unplug or module unload of the aic94xx driver. Systems with Adaptec AIC-94xx SAS controllers are affected. The fix adds tasklet_kill() to ensure proper synchronization before cleanup.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.