CVE-2025-40342 in Linux Kernel
Sumário (Inglês)
In the Linux kernel, the following vulnerability has been resolved: nvme-fc: use lock accessing port_state and rport state nvme_fc_unregister_remote removes the remote port on a lport object at any point in time when there is no active association. This races with with the reconnect logic, because nvme_fc_create_association is not taking a lock to check the port_state and atomically increase the active count on the rport.
Responsável
Linux
Reservar
16/04/2025
Divulgação
09/12/2025
Inscrições
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidade | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 334896 | Linux Kernel nvme-fc port_state Elevação de Privilégios | 371 | Não definido | Correção oficial | CVE-2025-40342 |