Home

Description

In the Linux kernel, the following vulnerability has been resolved: nvme-fc: use lock accessing port_state and rport state nvme_fc_unregister_remote removes the remote port on a lport object at any point in time when there is no active association. This races with with the reconnect logic, because nvme_fc_create_association is not taking a lock to check the port_state and atomically increase the active count on the rport.

PUBLISHED Reserved 2025-04-16 | Published 2025-12-09 | Updated 2025-12-09 | Assigner Linux

Product status

Default status
unaffected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before de3d91af47bc015031e7721b100a29989f6498a5
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before e8cde03de8674b05f2c5e0870729049eba517800
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before 4253e0a4546138a2bf9cb6acf66b32fee677fc7c
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before 25f4bf1f7979a7871974fd36c79d69ff1cf4b446
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before 9950af4303942081dc8c7a5fdc3688c17c7eb6c0
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before a2f7fa75c4a2a07328fa22ccbef461db76790b55
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before 891cdbb162ccdb079cd5228ae43bdeebce8597ad
affected

Default status
affected

5.10.247 (semver)
unaffected

5.15.197 (semver)
unaffected

6.1.159 (semver)
unaffected

6.6.117 (semver)
unaffected

6.12.58 (semver)
unaffected

6.17.8 (semver)
unaffected

6.18 (original_commit_for_fix)
unaffected

References

git.kernel.org/...c/de3d91af47bc015031e7721b100a29989f6498a5

git.kernel.org/...c/e8cde03de8674b05f2c5e0870729049eba517800

git.kernel.org/...c/4253e0a4546138a2bf9cb6acf66b32fee677fc7c

git.kernel.org/...c/25f4bf1f7979a7871974fd36c79d69ff1cf4b446

git.kernel.org/...c/9950af4303942081dc8c7a5fdc3688c17c7eb6c0

git.kernel.org/...c/a2f7fa75c4a2a07328fa22ccbef461db76790b55

git.kernel.org/...c/891cdbb162ccdb079cd5228ae43bdeebce8597ad

cve.org (CVE-2025-40342)

nvd.nist.gov (CVE-2025-40342)

Download JSON