CVE-2025-40171

Katalog CVE

CVSS 7.5 · High EPSS 0,47%

Skor CVSS 3.1 7.5 (High) menurut CNA.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: nvmet-fc: move lsop put work to nvmet_fc_ls_req_op It’s possible for more than one async command to be in flight from __nvmet_fc_send_ls_req. For each command, a tgtport reference is taken. In the current code, only one put work item is queued at a time, which results in a leaked reference. To fix this, move the work item to the nvmet_fc_ls_req_op struct, which already tracks all resources related to the command.

Rincian

Terbit di NVD

12 November 2025

Terakhir diubah

30 Juli 2026

Status NVD

Deferred

CVSS 3.1

7.5 (High), sumber CNA
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

EPSS (30 hari)

0,47% peluang dieksploitasi; lebih tinggi dari 39,1% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/060ecc81240ef9d60d9485a3a5eb55a0d6e7a25c
• https://git.kernel.org/stable/c/11269c08013f4ee8b8f5edc6c56700acb34092d0
• https://git.kernel.org/stable/c/7331925c247b03b7767b8cd93cfe1b7aa2377850
• https://git.kernel.org/stable/c/7a619f8c869117ffed08365b377f66b7e1d941b4
• https://git.kernel.org/stable/c/a28112cc55013cd8cbd5d36b5115a5b851151bd9
• https://git.kernel.org/stable/c/db5a5406fb7e5337a074385c7a3e53c77f2c1bd3