Linux Kernel Namespace Crash Vulnerability in NVMe Products - Vendor Linux

CVE-2025-21850

Summary

A vulnerability in the Linux kernel can lead to system crashes when disabling namespaces in NVMe products. The issue arises from improper handling of the per-CPU counter, leading to potential crashes when I/O operations are still pending. Specifically, if the namespace is disabled before all pending I/Os are completed, it can cause a general protection fault, manifesting as a null-ptr dereference. This vulnerability underscores the importance of ensuring that counters are correctly initialized and monitored during namespace management, preventing system instability.

References