← CVE Intelligence

CVE-2025-40342

nvme-fc: use lock accessing port_state and rport state PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: nvme-fc: use lock accessing port_state and rport state nvme_fc_unregister_remote removes the remote port on a lport object at any point in time when there is no active association. This races with with the reconnect logic, because nvme_fc_create_association is not taking a lock to check the port_state and atomically increase the active count on the rport.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected e399441de9115cd472b8ace6c517708273ca7997 before de3d91af47bc015031e7721b100a29989f6498a5; affected e399441de9115cd472b8ace6c517708273ca7997 before e8cde03de8674b05f2c5e0870729049eba517800; affected e399441de9115cd472b8ace6c517708273ca7997 before 4253e0a4546138a2bf9cb6acf66b32fee677fc7c; affected e399441de9115cd472b8ace6c517708273ca7997 before 25f4bf1f7979a7871974fd36c79d69ff1cf4b446; affected e399441de9115cd472b8ace6c517708273ca7997 before 9950af4303942081dc8c7a5fdc3688c17c7eb6c0; affected e399441de9115cd472b8ace6c517708273ca7997 before a2f7fa75c4a2a07328fa22ccbef461db76790b55; affected e399441de9115cd472b8ace6c517708273ca7997 before 891cdbb162ccdb079cd5228ae43bdeebce8597ad
Linux / Linuxaffected 4.10; unaffected 0 before 4.10; unaffected 5.10.247 through 5.10.*; unaffected 5.15.197 through 5.15.*; unaffected 6.1.159 through 6.1.*; unaffected 6.6.117 through 6.6.*; unaffected 6.12.58 through 6.12.*; unaffected 6.17.8 through 6.17.*; unaffected 6.18 through *

CWE

No CWE identifiers supplied.

References