Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2025-40171

nvmet-fc: move lsop put work to nvmet_fc_ls_req_op

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: nvmet-fc: move lsop put work to nvmet_fc_ls_req_op It’s possible for more than one async command to be in flight from __nvmet_fc_send_ls_req. For each command, a tgtport reference is taken. In the current code, only one put work item is queued at a time, which results in a leaked reference. To fix this, move the work item to the nvmet_fc_ls_req_op struct, which already tracks all resources related to the command.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 5e0bc09a52b6169ce90f7ac6e195791adb16cec4 to < 11269c08013f4ee8b8f5edc6c56700acb34092d0affected
  • 9e6987f8937a7bd7516aa52f25cb7e12c0c92ee8 to < a28112cc55013cd8cbd5d36b5115a5b851151bd9affected
  • eaf0971fdabf2a93c1429dc6bedf3bbe85dffa30 to < 060ecc81240ef9d60d9485a3a5eb55a0d6e7a25caffected
  • 710c69dbaccdac312e32931abcb8499c1525d397 to < 7331925c247b03b7767b8cd93cfe1b7aa2377850affected
  • 710c69dbaccdac312e32931abcb8499c1525d397 to < 7a619f8c869117ffed08365b377f66b7e1d941b4affected
  • 710c69dbaccdac312e32931abcb8499c1525d397 to < db5a5406fb7e5337a074385c7a3e53c77f2c1bd3affected
  • 1d86f79287206deec36d63b89c741cf542b6caddaffected
  • 5.15.150 to < 5.15.195affected
  • 6.1.80 to < 6.1.156affected
  • 6.6.19 to < 6.6.112affected
  • 6.7.7 to < 6.8affected

Linux Linux

Default version status: affected

  • 6.8affected
  • 0 to < 6.8unaffected
  • 5.15.195 to ≤ 5.15.*unaffected
  • 6.1.156 to ≤ 6.1.*unaffected
  • 6.6.112 to ≤ 6.6.*unaffected
  • 6.12.53 to ≤ 6.12.*unaffected
  • 6.17.3 to ≤ 6.17.*unaffected
  • 6.18 to ≤ *unaffected

References