CVSS 3.1
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Атакува се
Време до експлоатация
Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.
- Експлоатация: няма данни за експлоатация
- Атаката може да се автоматизира
Описание
Оригинално описание
In the Linux kernel, the following vulnerability has been resolved: nvmet-fc: avoid scheduling association deletion twice When forcefully shutting down a port via the configfs interface, nvmet_port_subsys_drop_link() first calls nvmet_port_del_ctrls() and then nvmet_disable_port(). Both functions will eventually schedule all remaining associations for deletion. The current implementation checks whether an association is about to be removed, but only after the work item has already been scheduled. As a result, it is possible for the first scheduled work item to free all resources, and then for the same work item to be scheduled again for deletion. Because the association list is an RCU list, it is not possible to take a lock and remove the list entry directly, so it cannot be looked up again. Instead, a flag (terminating) must be used to determine whether the association is already in the process of being deleted.
Засегнати продукти
- Linux Linux: a07b4970f464f13640e28e16dad6cfa33647cc99 преди 2f4852db87e25d4e226b25cb6f652fef9504360e; a07b4970f464f13640e28e16dad6cfa33647cc99 преди 85e2ce1920cb511d57aae59f0df6ff85b28bf04d; a07b4970f464f13640e28e16dad6cfa33647cc99 преди 601ed47b2363c24d948d7bac0c23abc8bd459570; a07b4970f464f13640e28e16dad6cfa33647cc99 преди 04d17540ef51e2c291eb863ca87fd332259b2d40; a07b4970f464f13640e28e16dad6cfa33647cc99 преди c09ac9a63fc3aaf4670ad7b5e4f5afd764424154; a07b4970f464f13640e28e16dad6cfa33647cc99 преди f2537be4f8421f6495edfa0bc284d722f253841d
- Linux Linux: 4.8; преди 4.8; 5.15.197 до 5.15.*; 6.1.159 до 6.1.*; 6.6.117 до 6.6.*; 6.12.58 до 6.12.*; 6.17.8 до 6.17.*; 6.18 до *
История
- 9 декември 2025 Публикувано
Други уязвимости в Linux Linux
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2025-40343
- https://nvd.nist.gov/vuln/detail/CVE-2025-40343
- https://git.kernel.org/stable/c/2f4852db87e25d4e226b25cb6f652fef9504360e
- https://git.kernel.org/stable/c/85e2ce1920cb511d57aae59f0df6ff85b28bf04d
- https://git.kernel.org/stable/c/601ed47b2363c24d948d7bac0c23abc8bd459570
- https://git.kernel.org/stable/c/04d17540ef51e2c291eb863ca87fd332259b2d40
- https://git.kernel.org/stable/c/c09ac9a63fc3aaf4670ad7b5e4f5afd764424154
- https://git.kernel.org/stable/c/f2537be4f8421f6495edfa0bc284d722f253841d