CVE-2025-39788

Two new CVEs have been published affecting SCSI UFS drivers. CVE-2024-57872, published on January 11, 2025, involves deallocating HBA during the ufshcd_pltfrm_remove() function. CVE-2025-39788, published on September 11, 2025, addresses programming issues with HCI_UTRL_NEXUS_TYPE in Exynos devices.

The openSUSE project released a critical security update for the SUSE Linux Enterprise 15 SP6 Azure kernel, addressing several vulnerabilities. Key issues fixed include a buffer overflow in the SCSI target and a write-after-free bug in the pds_core component, among others. The update aims to enhance...