A subtle but consequential memory-handling bug in the Linux kernel’s qla2xxx SCSI driver has been assigned CVE-2025-68741 and patched upstream: an error path in qla2xxx_process_purls_iocb used kfree to release a structure that may have been drawn from a per-adapter pre‑allocated pool, which can...