CVE-2025-40146

Linux Kernel 3.16-6.17.2 - Denial of Service via blk-mq nr_requests Deadlock

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix potential deadlock while nr_requests grown Allocate and free sched_tags while queue is freezed can deadlock[1], this is a long term problem, hence allocate memory before freezing queue and free memory after queue is unfreezed. [1] https://lore.kernel.org/all/[email protected]/

References (2)

Core 2

Core References

Patch

https://git.kernel.org/stable/c/8d26acf8477174d8ef690eb6affe13a630f586ae

Patch

https://git.kernel.org/stable/c/b86433721f46d934940528f28d49c1dedb690df1

Scores

EPSS 0.0022

EPSS Percentile 12.5%

Details

Status published

Products (7)

linux/Kernel 3.16.0 - 6.17.3linux

Linux/Linux < 3.16

Linux/Linux 3.16

Linux/Linux 6.17.3 - 6.17.*

Linux/Linux 6.18

Linux/Linux e3a2b3f931f59d5284abd13faf8bded726884ffd - 8d26acf8477174d8ef690eb6affe13a630f586ae

Linux/Linux e3a2b3f931f59d5284abd13faf8bded726884ffd - b86433721f46d934940528f28d49c1dedb690df1

Published Nov 12, 2025

Tracked Since Feb 18, 2026