In the Linux kernel, the following vulnerability has been resolved:
scsi: sg: Do not sleep in atomic context
sgfinishremreq() calls blkrqunmapuser(). The latter function may sleep. Hence, call sgfinishrem_req() with interrupts enabled instead of disabled.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40259.json",
"cna_assigner": "Linux"
}