A vulnerability labeled as critical has been found in Linux Kernel up to 6.1.159/6.6.119/6.12.63/6.18.2. Impacted is the function asd_pci_remove of the component scsi. The manipulation results in use after free.

This vulnerability is identified as CVE-2025-71075. The attack can only be performed from the local network. There is not any exploit available.

The affected component should be upgraded.