CVE-2025-40115

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.16.0-rc1+ #1

Description The Linux kernel contained a flaw in the mpt3sas driver where a crash could occur during the removal of a transport port. This was due to logging messages with dev printk() against a SAS transport device that was already partially unregistered or freed. The issue was resolved by using ioc info(), which logs via the PCI device, ensuring it remains valid until driver removal.

Recommendations Update to a version of the Linux kernel newer than 6.16.0-rc1+ #1.