Vulnerability in Linux

CVE-2025-40259

In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Do not sleep in atomic context sg_finish_rem_req() calls blk_rq_unmap_user(). The latter function may sleep. Hence, call sg_finish_rem_req() with interrupts enabled instead of disabled.

EPSS: 0.002 (7.7th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 6.17.10, 3.18.101, 3.16.85

References