CVE-2025-40259

Not scored yetLast modified Oct 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: sg: Do not sleep in atomic context

sg_finish_rem_req() calls blk_rq_unmap_user(). The latter function may sleep. Hence, call sg_finish_rem_req() with interrupts enabled instead of disabled.

Metrics

No CVSS score has been published yet.

Affected software

VendorProductVersions
LinuxLinux>= 97d27b0dd015e980ade63fda111fd1353276e28b, < 11eeee00c94d770d4e45364060b5f1526dfe567b; >= 97d27b0dd015e980ade63fda111fd1353276e28b, < db6ac8703ab2b473e1ec845f57f6dd961a388d9f; >= 97d27b0dd015e980ade63fda111fd1353276e28b, < 109afbd88ecc46b6cc7551367222387e97999765; >= 97d27b0dd015e980ade63fda111fd1353276e28b, < 3dfd520c3b4ffe69e0630c580717d40447ab842f; >= 97d27b0dd015e980ade63fda111fd1353276e28b, < b343cee5df7e750d9033fba33e96fc4399fa88a5; >= 97d27b0dd015e980ade63fda111fd1353276e28b, < b2c0340cfa25c5c1f65e8590cc1a2dc97d14ef0f; >= 97d27b0dd015e980ade63fda111fd1353276e28b, < 6983d8375c040bb449d2187f4a57a20de01244fe; >= 97d27b0dd015e980ade63fda111fd1353276e28b, < 90449f2d1e1f020835cba5417234636937dd657e; 8d1f3b474a89b42f957ba3bae959dd3cd16531ca; fa55ef3f803fc7c20be0ab809e6278c31febd875; 6af37613289cfd32516ada47e444b48a638829c8; 4a8e8e0af9a520a685e0ab2d489327d5220d7ce2; ae9b6ae2e77947534e255903627cc62746ea77e2; >= 3.16.85, < 3.17; >= 3.18.101, < 3.19; >= 4.1.52, < 4.2; >= 4.4.123, < 4.5; >= 4.9.89, < 4.10
LinuxLinux4.12

References

Timeline

Published
Dec 4, 2025
Last modified
Oct 19, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-40269.8A vulnerability, which was classified as critical, has been found in PHPGurukul Nipah Virus Testing Management System 1.0. This issue affectCVE-2025-40260In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix scx_enable() crash on helper kthread creation failure ACVE-2025-402619.8In the Linux kernel, the following vulnerability has been resolved: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl(CVE-2025-402627.8In the Linux kernel, the following vulnerability has been resolved: Input: imx_sc_key - fix memory corruption on unload This is supposed tCVE-2025-40263In the Linux kernel, the following vulnerability has been resolved: Input: cros_ec_keyb - fix an invalid memory access If cros_ec_keyb_regCVE-2025-40264In the Linux kernel, the following vulnerability has been resolved: be2net: pass wrb_params in case of OS2BMC be_insert_vlan_in_pkt() is cCVE-2025-40265In the Linux kernel, the following vulnerability has been resolved: vfat: fix missing sb_min_blocksize() return value checks When emulatinCVE-2025-402668.2In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Check the untrusted offset in FF-A memory share Verify theCVE-2025-40267In the Linux kernel, the following vulnerability has been resolved: io_uring/rw: ensure allocated iovec gets cleared for early failure A pCVE-2025-40268In the Linux kernel, the following vulnerability has been resolved: cifs: client: fix memory leak in smb3_fs_context_parse_param The user CVE-2025-402697.8In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential overflow of PCM transfer buffer The PCMCVE-2025-40279.8A vulnerability, which was classified as critical, was found in PHPGurukul Old Age Home Management System 1.0. Affected is an unknown functi
CVE-2025-40259: Unscored | Vulnix