VULNERABILITY INTELLIGENCE
CVE-2025-40259
EPSS probability0.20%
CISA KEVNot currently listed
Published2025-12-04
Last modified2026-10-19
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Do not sleep in atomic context sg_finish_rem_req() calls blk_rq_unmap_user(). The latter function may sleep. Hence, call sg_finish_rem_req() with interrupts enabled instead of disabled.