CVE-2025-40342

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s nvme-fc module related to accessing port and remote port states without proper locking mechanisms. Specifically, the nvme fc unregister remote function can remove a remote port while the reconnect logic is attempting to access the same port state without a lock, leading to a race condition. This occurs because nvme fc create association does not acquire a lock to verify the port state and increment the active count on the remote port.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.