01 Record

CVE-2025-40343

nvmet-fc: avoid scheduling association deletion twice

CriticalPUBLISHEDCNA: Linux

CNA base score9.8 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

nvmet-fc: avoid scheduling association deletion twice

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatableyesAn attacker can reliably automate reconnaissance through exploitation, so this scales.
Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.65% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 50.6% of scored records. A rank, not a probability.

NVD base score

9.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Deferred. NVD last modified this record on 2026-10-15.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2025-12-09 04:10Z10 MO AGO
Last updated: 2026-10-15 22:02Z13 DAYS AGO
Reserved: 2025-04-16
Assigning CNA: Linux
Record state: PUBLISHED
Severity: Critical (CVSS 9.8)
CNA CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses: No CWE assigned
Data version: 5.2
Document digest: f77d870bbbb4f213b53d2cb439b874d059e9c9982258391130a350f6275a65fc

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxa07b4970f464f13640e28e16dad6cfa33647cc99 to < 2f4852db87e25d4e226b25cb6f652fef9504360e, a07b4970f464f13640e28e16dad6cfa33647cc99 to < 85e2ce1920cb511d57aae59f0df6ff85b28bf04d, a07b4970f464f13640e28e16dad6cfa33647cc99 to < 601ed47b2363c24d948d7bac0c23abc8bd459570, a07b4970f464f13640e28e16dad6cfa33647cc99 to < 04d17540ef51e2c291eb863ca87fd332259b2d40, a07b4970f464f13640e28e16dad6cfa33647cc99 to < c09ac9a63fc3aaf4670ad7b5e4f5afd764424154, a07b4970f464f13640e28e16dad6cfa33647cc99 to < f2537be4f8421f6495edfa0bc284d722f253841d, 4.8—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/2f4852db87e25d4e226b25cb6f652fef9504360e
git.kernel.orghttps://git.kernel.org/stable/c/85e2ce1920cb511d57aae59f0df6ff85b28bf04d
git.kernel.orghttps://git.kernel.org/stable/c/601ed47b2363c24d948d7bac0c23abc8bd459570
git.kernel.orghttps://git.kernel.org/stable/c/04d17540ef51e2c291eb863ca87fd332259b2d40
git.kernel.orghttps://git.kernel.org/stable/c/c09ac9a63fc3aaf4670ad7b5e4f5afd764424154
git.kernel.orghttps://git.kernel.org/stable/c/f2537be4f8421f6495edfa0bc284d722f253841d

07 Fixed in

Debian 12

linux
Fixed in 6.1.159-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.63-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.17.8-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.