Linux Kernel Vulnerability in SCSI Driver Functions
CVE-2025-40259

Currently unrated

Key Information:

Vendor: Linux
Status: Linux
Vendor: CVE Published:; 4 December 2025

What is CVE-2025-40259?

A vulnerability in the Linux kernel's SCSI driver functions occurs when sg_finish_rem_req() is executed. The blk_rq_unmap_user() function called within this context is capable of entering a sleep state, which can lead to unintended consequences in a multi-threaded environment. By ensuring that sg_finish_rem_req() is called with interrupts enabled, this issue is mitigated, enhancing the overall stability and security of the kernel's SCSI subsystem.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch