The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
nvmet: Fix crash when a namespace is disabled
The namespace percpu counter protects pending I/O, and we can only safely diable the namespace once the counter drop to zero. Otherwise we end up with a crash when running blktests/nvme/058 (eg for loop transport):
[ 2352.930426] [ T53909] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN PTI [ 2352.930431] [ T53909] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 2352.930434] [ T53909] CPU: 3 UID: 0 PID: 53909 Comm: kworker/u16:5 Tainted: G W 6.13.0-rc6 #232 [ 2352.930438] [ T53909] Tainted: [W]=WARN [ 2352.930440] [ T53909] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-3.fc41 04/01/2014 [ 2352.930443] [ T53909] Workqueue: nvmet-wq nvme_loop_execute_work [nvme_loop] [ 2352.930449] [ T53909] RIP: 0010:blkcg_set_ioprio+0x44/0x180
as the queue is already torn down when calling submit_bio();
So we need to init the percpu counter in nvmet_ns_enable(), and wait for it to drop to zero in nvmet_ns_disable() to avoid having I/O pending after the namespace has been disabled.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 12, 2025 |
| Suse | — | Upgrade kernel-devel-rtUpgrade dtb-broadcomUpgrade ocfs2-kmp-rtUpgrade dtb-freescaleUpgrade kernel-develUpgrade kernel-symsUpgrade dlm-kmp-defaultUpgrade dtb-allwinnerUpgrade reiserfs-kmp-rtUpgrade dtb-amdUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-azureUpgrade dtb-caviumUpgrade dtb-socionextUpgrade dtb-renesasUpgrade kernel-64kb-develUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade dtb-hisiliconUpgrade dtb-appleUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade dtb-apmUpgrade kernel-zfcpdumpUpgrade kernel-default-baseUpgrade kernel-default-extraUpgrade kernel-debug-develUpgrade dtb-marvellUpgrade kernel-azure-optionalUpgrade kernel-debugUpgrade ocfs2-kmp-azureUpgrade kernel-azure-extraUpgrade kselftests-kmp-64kbUpgrade dtb-amazonUpgrade kernel-source-azureUpgrade dtb-lgUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatchUpgrade kernel-rt-develUpgrade dtb-mediatekUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-64kbUpgrade kernel-default-optionalUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade dtb-xilinxUpgrade kernel-default-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-macrosUpgrade dlm-kmp-rtUpgrade dtb-armUpgrade cluster-md-kmp-64kbUpgrade kernel-syms-azureUpgrade dtb-nvidiaUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-azure-develUpgrade kernel-rt-optionalUpgrade kselftests-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-extraUpgrade dtb-amlogicUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-sourceUpgrade kernel-obs-buildUpgrade dtb-sprdUpgrade dtb-exynosUpgrade kernel-default-vdsoUpgrade dtb-alteraUpgrade kernel-kvmsmallUpgrade gfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-docsUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-azureUpgrade dtb-rockchipUpgrade kernel-syms-rtUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade kernel-defaultUpgrade kernel-azure-vdsoUpgrade dtb-qcomUpgrade kernel-rt-vdsoUpgrade kernel-source-vanillaUpgrade kernel-source-rt | Dec 5, 2025 | Jun 12, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub