VDB
DEBIAN-CVE-2025-40259
DEBIAN-CVE-2025-40259
PUBLISHED
In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Do not sleep in atomic context sg_finish_rem_req() calls blk_rq_unmap_user(). The latter function may sleep. Hence, call sg_finish_rem_req() with interrupts enabled instead of disabled.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:13 | linux | 6.12.63-1~bpo12+1, 6.12.57-1~bpo12+1, 6.12.57-1 |
| Debian:14 | linux | 6.12.43-1, 6.12.43-1~bpo12+1, 6.12.48-1 |
| Debian:12 | linux | 6.1.128-1, 6.1.129-1, 6.1.133-1 |
Timeline
- Dec 4, 2025 CVE Published
- Oct 23, 2026 CVE Updated