Security tracker / CVE-2025-40146

CVE-2025-40146

blk-mq: fix potential deadlock while nr_requests grown

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in e3a2b3f931f5 ("blk-mq: allow changing of queue depth through
 carnil> sysfs"). Vulnerable versions: 3.16.

Bugs

Status

Branch	Status
upstream	released (6.18-rc1) [b86433721f46d934940528f28d49c1dedb690df1]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	released (6.17.3) [8d26acf8477174d8ef690eb6affe13a630f586ae]
6.12-upstream-stable	needed
6.6-upstream-stable	needed
6.1-upstream-stable	needed
5.10-upstream-stable	needed
sid	released (6.17.6-1)
6.12-trixie-security	needed
6.1-bookworm-security	needed
5.10-bullseye-security	needed