PT-2025-49796 · Linux+3 · Linux Kernel+3
Published
2025-01-01
·
Updated
2026-05-07
·
CVE-2025-40343
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Linux kernel’s nvmet-fc subsystem where shutting down a port via the configfs interface can lead to a double scheduling of association deletion. This occurs because both
nvmet port del ctrls() and nvmet disable port() schedule remaining associations for deletion. The current implementation checks for scheduled deletions after the work item is already scheduled, potentially resulting in the same work item being scheduled again after resources have been freed. The association list is an RCU list, preventing direct locking and requiring a flag to determine if an association is already being deleted.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Ubuntu