CVE-2025-40259

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the SCSI subsystem, specifically in the sg module. The sg finish rem req() function calls blk rq unmap user(), which can potentially lead to sleeping within an atomic context. This occurs because blk rq unmap user() may sleep, and sg finish rem req() was previously called with interrupts disabled.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.