cve 2025 40259

  1. Linux SG Driver Patch Fixes Atomic Context Sleep Bug CVE-2025-40259

    A short, targeted kernel fix landed this week that closes a subtle but real correctness bug in the SCSI generic driver (sg): the function responsible for finishing a removed request, sg_finish_rem_req, was calling blk_rq_unmap_user while interrupts were disabled — and blk_rq_unmap_user can...