CVE-2025-71232

A memory leak flaw was found in the Linux kernel's qla2xxx Fibre Channel driver. In error handling paths, the driver fails to free the SCSI request packet (sp) structure, leaving objects in the qla2xxx_srbs slab cache. When the module is unloaded, kmem_cache_destroy() fails because objects remain in the cache, triggering a kernel warning and potentially causing system instability.

This flaw affects systems with QLogic Fibre Channel HBAs using the qla2xxx driver. The memory leak accumulates during error conditions and manifests as a crash or warning during driver module unload. Normal operation without module unload cycling is not directly affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the qla2xxx module from being loaded. See https://access.redhat.com/solutions/41278 for instructions on how to blacklist kernel modules.