CVE-2025-21690

Katalog CVE

CVSS 5.5 · Medium EPSS 0,22%

Kerentanan Allocation of Resources Without Limits or Throttling pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Ratelimit warning logs to prevent VM denial of service If there's a persistent error in the hypervisor, the SCSI warning for failed I/O can flood the kernel log and max out CPU utilization, preventing troubleshooting from the VM side. Ratelimit the warning so it doesn't DoS the VM.

Rincian

Terbit di NVD

10 Februari 2025

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-770: Allocation of Resources Without Limits or Throttling

EPSS (30 hari)

0,22% peluang dieksploitasi; lebih tinggi dari 11,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/01d1ebdab9ccb73c952e1666a8a80abd194dbc55 patch
• https://git.kernel.org/stable/c/088bde862f8d3d0fc52e40e66a0484a246837087 patch
• https://git.kernel.org/stable/c/182a4b7c731e95c08cb47f14b87a272b6ab2b2da patch
• https://git.kernel.org/stable/c/81d4dd05c412ba04f9f6b85b718e6da833be290c patch
• https://git.kernel.org/stable/c/d0f0af1bafef33b3e2aa8c3a4ef44db48df9b0ea patch
• https://git.kernel.org/stable/c/d2138eab8cde61e0e6f62d0713e45202e8457d6d patch
• https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html