BaseFortify

Publication date: 2025-11-12

Last updated on: 2025-11-12

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: nvmet-fc: move lsop put work to nvmet_fc_ls_req_op It’s possible for more than one async command to be in flight from __nvmet_fc_send_ls_req. For each command, a tgtport reference is taken. In the current code, only one put work item is queued at a time, which results in a leaked reference. To fix this, move the work item to the nvmet_fc_ls_req_op struct, which already tracks all resources related to the command.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-12

Last Modified

2025-11-12

Generated

2026-07-06

AI Q&A

2025-11-13

EPSS Evaluated

2026-07-05

NVD

CVE-2025-40171

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel's nvmet-fc component involves improper handling of asynchronous commands. Specifically, multiple async commands can be in flight from __nvmet_fc_send_ls_req, each taking a tgtport reference. However, the code only queues one put work item at a time, causing a leaked reference. The fix involves moving the work item to the nvmet_fc_ls_req_op struct, which properly tracks all resources related to each command.

Impact Analysis

The vulnerability can lead to resource leaks in the Linux kernel's nvmet-fc subsystem due to leaked tgtport references. This could potentially degrade system stability or performance over time as resources are not properly released.

Hi! I’m here to help you understand CVE-2025-40171. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70