Security Advisory

CVE-2025-40259

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-12-04 16:08:19
Last updated 2026-05-23 16:01:50
Assigner Linux
State PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Do not sleep in atomic context sg_finish_rem_req() calls blk_rq_unmap_user(). The latter function may sleep. Hence, call sg_finish_rem_req() with interrupts enabled instead of disabled.