CVE-2025-40146

Source
https://nvd.nist.gov/vuln/detail/CVE-2025-40146
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-40146.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-40146
Downstream
Published
2025-11-12T10:23:26.287Z
Modified
2025-11-28T02:35:47.739508Z
Summary
blk-mq: fix potential deadlock while nr_requests grown
Details

In the Linux kernel, the following vulnerability has been resolved:

blk-mq: fix potential deadlock while nr_requests grown

Allocate and free sched_tags while queue is freezed can deadlock[1], this is a long term problem, hence allocate memory before freezing queue and free memory after queue is unfreezed.

[1] https://lore.kernel.org/all/0659ea8d-a463-47c8-9180-43c719e106eb@linux.ibm.com/

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40146.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e3a2b3f931f59d5284abd13faf8bded726884ffd
Fixed
8d26acf8477174d8ef690eb6affe13a630f586ae
Fixed
b86433721f46d934940528f28d49c1dedb690df1

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.16.0
Fixed
6.17.3