HomeDefectsLIN1023-17328
Acknowledged

LIN1023-17328 : Security Advisory - linux - CVE-2025-40342

Created: Dec 10, 2025    Updated: Dec 12, 2025
Found In Version: 10.23.30.1
Severity: Standard
Applicable for: Wind River Linux LTS 23
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:[EOL][EOL]nvme-fc: use lock accessing port_state and rport state[EOL][EOL]nvme_fc_unregister_remote removes the remote port on a lport object at[EOL]any point in time when there is no active association. This races with[EOL]with the reconnect logic, because nvme_fc_create_association is not[EOL]taking a lock to check the port_state and atomically increase the[EOL]active count on the rport.
Live chat
Online