CVE-2025-39803

HIGH

Linux Kernel < 6.16.4 - Reachable Assertion

Title source: rule
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Remove WARN_ON_ONCE() call from ufshcd_uic_cmd_compl() The UIC completion interrupt may be disabled while an UIC command is being processed. When the UIC completion interrupt is reenabled, an UIC interrupt is triggered and the WARN_ON_ONCE(!cmd) statement is hit. Hence this patch that removes this kernel warning.

Scores

CVSS v3 7.8
EPSS 0.0001
EPSS Percentile 0.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-617
Status published
Products (3)
linux/Kernel 6.13.0 - 6.16.4linux
linux/linux_kernel 6.17 rc1 (2 CPE variants)
linux/linux_kernel 6.13 - 6.16.4
Published Sep 15, 2025
Tracked Since Feb 18, 2026