Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2025-40342

nvme-fc: use lock accessing port_state and rport state

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: nvme-fc: use lock accessing port_state and rport state nvme_fc_unregister_remote removes the remote port on a lport object at any point in time when there is no active association. This races with with the reconnect logic, because nvme_fc_create_association is not taking a lock to check the port_state and atomically increase the active count on the rport.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • e399441de9115cd472b8ace6c517708273ca7997 to < de3d91af47bc015031e7721b100a29989f6498a5affected
  • e399441de9115cd472b8ace6c517708273ca7997 to < e8cde03de8674b05f2c5e0870729049eba517800affected
  • e399441de9115cd472b8ace6c517708273ca7997 to < 4253e0a4546138a2bf9cb6acf66b32fee677fc7caffected
  • e399441de9115cd472b8ace6c517708273ca7997 to < 25f4bf1f7979a7871974fd36c79d69ff1cf4b446affected
  • e399441de9115cd472b8ace6c517708273ca7997 to < 9950af4303942081dc8c7a5fdc3688c17c7eb6c0affected
  • e399441de9115cd472b8ace6c517708273ca7997 to < a2f7fa75c4a2a07328fa22ccbef461db76790b55affected
  • e399441de9115cd472b8ace6c517708273ca7997 to < 891cdbb162ccdb079cd5228ae43bdeebce8597adaffected

Linux Linux

Default version status: affected

  • 4.10affected
  • 0 to < 4.10unaffected
  • 5.10.247 to ≤ 5.10.*unaffected
  • 5.15.197 to ≤ 5.15.*unaffected
  • 6.1.159 to ≤ 6.1.*unaffected
  • 6.6.117 to ≤ 6.6.*unaffected
  • 6.12.58 to ≤ 6.12.*unaffected
  • 6.17.8 to ≤ 6.17.*unaffected
  • 6.18 to ≤ *unaffected

References