CVE-2025-71235

A flaw was found in the Linux kernel's qla2xxx Fibre Channel driver. When a module unload is initiated while a fabric scan is in progress, the UNLOADING flag causes work items to be skipped. This results in DMA memory being freed in interrupt context via dma_free_attrs(), which is not allowed and causes a system crash. The fix delays module unload until ongoing fabric scans complete.

This flaw affects systems with QLogic Fibre Channel HBAs performing module load/unload cycles during active fabric discovery. The crash requires specific timing where a module unload overlaps with an ongoing fabric scan. Normal steady-state operation is unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the qla2xxx module from being loaded. See https://access.redhat.com/solutions/41278 for instructions on how to blacklist kernel modules.