Resource Leak in Linux Kernel's NVM Express Fiber Channel

CVE-2025-40171

What is CVE-2025-40171?

A resource leak exists in the Linux kernel's NVM Express Fiber Channel driver where multiple asynchronous commands can be active simultaneously. This design flaw leads to a situation where a reference to a target port is obtained for each command, but only one put work item is queued, resulting in leaked references. To address this issue, the solution involves repositioning the work item within the nvmet_fc_ls_req_op structure, which is responsible for tracking all resources related to each command. Ensuring proper resource management is crucial for maintaining system performance and reliability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References