CVE-2025-40171: Linux 6.8

Affected technology

Linux · 5e0bc09a52b6169ce90f7ac6e195791adb16cec4 to before 11269c08013f4ee8b8f5edc6c56700acb34092d0, 9e6987f8937a7bd7516aa52f25cb7e12c0c92ee8 to before a28112cc55013cd8cbd5d36b5115a5b851151bd9, eaf0971fdabf2a93c1429dc6bedf3bbe85dffa30 to before 060ecc81240ef9d60d9485a3a5eb55a0d6e7a25c, 710c69dbaccdac312e32931abcb8499c1525d397 to before 7331925c247b03b7767b8cd93cfe1b7aa2377850, 710c69dbaccdac312e32931abcb8499c1525d397 to before 7a619f8c869117ffed08365b377f66b7e1d941b4, 710c69dbaccdac312e32931abcb8499c1525d397 to before db5a5406fb7e5337a074385c7a3e53c77f2c1bd3, 1d86f79287206deec36d63b89c741cf542b6cadd, 5.15.150 to before 5.15.195, 6.1.80 to before 6.1.156, 6.6.19 to before 6.6.112, 6.7.7 to before 6.8
Linux

Linux · 6.8
Linux

Component: Not specified by the source
File: drivers/nvme/target/fc.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.