Security tracker / CVE-2025-39721

CVE-2025-39721

crypto: qat - flush misc workqueue during device shutdown

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in e5745f34113b ("crypto: qat - enable power management for QAT
 carnil> GEN4"). Vulnerable versions: 5.18.

Bugs

Status

Branch	Status
upstream	released (6.17-rc1) [3d4df408ba9bad2b205c7fb8afc1836a6a4ca88a]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.16-upstream-stable	released (6.16.4) [e59a52e429e13df3feb34f4853a8e36d121ed937]
6.12-upstream-stable	released (6.12.44) [fe546f5c50fc474daca6bee72caa7ab68a74c33d]
6.6-upstream-stable	released (6.6.103) [5858448a6c65d8ee3f8600570d3ce19febcb33be]
6.1-upstream-stable	needed
5.10-upstream-stable	N/A "Vulnerable code not present"
sid	released (6.16.5-1)
6.12-trixie-security	released (6.12.48-1)
6.1-bookworm-security	needed
5.10-bullseye-security	N/A "Vulnerable code not present"