{"id":"CVE-2025-40171","revision":"4f751028e4b54c26ad9bd63bb9b915c4","records":[{"revision":"4f751028e4b54c26ad9bd63bb9b915c4","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2025-40171","aliases":[],"title":"nvmet-fc: move lsop put work to nvmet_fc_ls_req_op","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet-fc: move lsop put work to nvmet_fc_ls_req_op\n\nIt’s possible for more than one async command to be in flight from\n__nvmet_fc_send_ls_req. For each command, a tgtport reference is taken.\n\nIn the current code, only one put work item is queued at a time, which\nresults in a leaked reference.\n\nTo fix this, move the work item to the nvmet_fc_ls_req_op struct, which\nalready tracks all resources related to the command.","state":0,"publishedAt":"2025-11-12T10:46:52.289+00:00","modifiedAt":"2026-10-15T22:02:39.456+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/nvme/target/fc.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5e0bc09a52b6169ce90f7ac6e195791adb16cec4\",\n                            \"lessThan\": \"11269c08013f4ee8b8f5edc6c56700acb34092d0\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"9e6987f8937a7bd7516aa52f25cb7e12c0c92ee8\",\n                            \"lessThan\": \"a28112cc55013cd8cbd5d36b5115a5b851151bd9\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"eaf0971fdabf2a93c1429dc6bedf3bbe85dffa30\",\n                            \"lessThan\": \"060ecc81240ef9d60d9485a3a5eb55a0d6e7a25c\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"710c69dbaccdac312e32931abcb8499c1525d397\",\n                            \"lessThan\": \"7331925c247b03b7767b8cd93cfe1b7aa2377850\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"710c69dbaccdac312e32931abcb8499c1525d397\",\n                            \"lessThan\": \"7a619f8c869117ffed08365b377f66b7e1d941b4\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"710c69dbaccdac312e32931abcb8499c1525d397\",\n                            \"lessThan\": \"db5a5406fb7e5337a074385c7a3e53c77f2c1bd3\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"1d86f79287206deec36d63b89c741cf542b6cadd\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"5.15.150\",\n                            \"lessThan\": \"5.15.195\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.80\",\n                            \"lessThan\": \"6.1.156\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.19\",\n                            \"lessThan\": \"6.6.112\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.7.7\",\n                            \"lessThan\": \"6.8\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/nvme/target/fc.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.8\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.8\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.195\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.156\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.112\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.53\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.17.3\",\n                            \"lessThanOrEqual\": \"6.17.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/11269c08013f4ee8b8f5edc6c56700acb34092d0","https://git.kernel.org/stable/c/a28112cc55013cd8cbd5d36b5115a5b851151bd9","https://git.kernel.org/stable/c/060ecc81240ef9d60d9485a3a5eb55a0d6e7a25c","https://git.kernel.org/stable/c/7331925c247b03b7767b8cd93cfe1b7aa2377850","https://git.kernel.org/stable/c/7a619f8c869117ffed08365b377f66b7e1d941b4","https://git.kernel.org/stable/c/db5a5406fb7e5337a074385c7a3e53c77f2c1bd3"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-40171","license":"CVE Program Terms of Use","key":"cve-program:CVE-2025-40171","identifiers":["CVE-2025-40171"]},"retained":false,"historicalAffected":[]}],"coverage":[]}