Vulnerability · Published Feb 10, 2025 · Assigned by Linux
CVE-2025-21690scsi: storvsc: Ratelimit warning logs to prevent VM denial of service
Medium 5.5
In plain English
A medium-severity resource allocation without limits in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 12% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.2%top 88.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Ratelimit warning logs to prevent VM denial of service If there's a persistent error in the hypervisor, the SCSI warning for failed I/O can flood the kernel log and max out CPU utilization, preventing troubleshooting from the VM side. Ratelimit the warning so it doesn't DoS the VM.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | linux | 6.1.128-1 | DEBIAN-CVE-2025-21690 |
| Debian:13 | linux | 6.12.12-1 | DEBIAN-CVE-2025-21690 |
| Debian:14 | linux | 6.12.12-1 | DEBIAN-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux | 5.15.0-135.146 | UBUNTU-CVE-2025-21690 |
| Ubuntu:24.04:LTS | linux | 6.8.0-62.65 | USN-7595-1 |
| Ubuntu:24.04:LTS | linux | 6.8.0-62.65 | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-allwinner-5.19 | no fix listed | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-aws | 5.15.0-1080.87 | UBUNTU-CVE-2025-21690 |
| Ubuntu:24.04:LTS | linux-aws | 6.8.0-1030.32 | USN-7595-1 |
| Ubuntu:24.04:LTS | linux-aws | 6.8.0-1030.32 | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-aws-5.19 | no fix listed | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-aws-6.2 | no fix listed | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-aws-6.5 | no fix listed | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-aws-6.8 | 6.8.0-1030.32~22.04.1 | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-aws-6.8 | 6.8.0-1030.32~22.04.1 | USN-7595-1 |
| Ubuntu:22.04:LTS | linux-azure | 5.15.0-1084.93 | UBUNTU-CVE-2025-21690 |
| Ubuntu:24.04:LTS | linux-azure | 6.8.0-1030.35 | UBUNTU-CVE-2025-21690 |
| Ubuntu:24.04:LTS | linux-azure | 6.8.0-1030.35 | USN-7596-1 |
| Ubuntu:22.04:LTS | linux-azure-5.19 | no fix listed | UBUNTU-CVE-2025-21690 |
| Ubuntu:24.04:LTS | linux-azure-6.11 | 6.11.0-1013.13~24.04.1 | USN-7448-1 |
| Ubuntu:24.04:LTS | linux-azure-6.11 | 6.11.0-1013.13~24.04.1 | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-azure-6.2 | no fix listed | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-azure-6.5 | no fix listed | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-azure-6.8 | 6.8.0-1030.35~22.04.1 | USN-7596-1 |
| Ubuntu:22.04:LTS | linux-azure-6.8 | 6.8.0-1030.35~22.04.1 | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-azure-fde | 5.15.0-1084.93.1 | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-azure-fde-5.19 | no fix listed | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-azure-fde-6.2 | no fix listed | UBUNTU-CVE-2025-21690 |
| Ubuntu:24.04:LTS | linux-azure-nvidia | 6.8.0-1018.19 | USN-7596-2 |
| Ubuntu:24.04:LTS | linux-azure-nvidia | 6.8.0-1018.19 | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-gcp | 5.15.0-1079.88 | UBUNTU-CVE-2025-21690 |
| Ubuntu:24.04:LTS | linux-gcp | 6.8.0-1031.33 | UBUNTU-CVE-2025-21690 |
| Ubuntu:24.04:LTS | linux-gcp | 6.8.0-1031.33 | USN-7595-5 |
| Ubuntu:22.04:LTS | linux-gcp-5.19 | no fix listed | UBUNTU-CVE-2025-21690 |
| Ubuntu:24.04:LTS | linux-gcp-6.11 | 6.11.0-1013.13~24.04.1 | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-gcp-6.2 | no fix listed | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-gcp-6.5 | no fix listed | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-gcp-6.8 | 6.8.0-1031.33~22.04.1 | USN-7595-5 |
| Ubuntu:22.04:LTS | linux-gcp-6.8 | 6.8.0-1031.33~22.04.1 | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-gke | 5.15.0-1077.83 | UBUNTU-CVE-2025-21690 |
| Ubuntu:24.04:LTS | linux-gke | 6.8.0-1026.30 | UBUNTU-CVE-2025-21690 |
| Ubuntu:24.04:LTS | linux-gke | 6.8.0-1026.30 | USN-7595-1 |
| Ubuntu:22.04:LTS | linux-gkeop | 5.15.0-1062.70 | UBUNTU-CVE-2025-21690 |
| Ubuntu:24.04:LTS | linux-gkeop | 6.8.0-1013.15 | UBUNTU-CVE-2025-21690 |
| Ubuntu:24.04:LTS | linux-gkeop | 6.8.0-1013.15 | USN-7595-1 |
| Ubuntu:22.04:LTS | linux-hwe-5.19 | no fix listed | UBUNTU-CVE-2025-21690 |
| Ubuntu:24.04:LTS | linux-hwe-6.11 | 6.11.0-24.24~24.04.1 | UBUNTU-CVE-2025-21690 |
| Ubuntu:24.04:LTS | linux-hwe-6.11 | 6.11.0-24.24~24.04.1 | USN-7445-1 |
| Ubuntu:22.04:LTS | linux-hwe-6.2 | no fix listed | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-hwe-6.5 | no fix listed | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-hwe-6.8 | 6.8.0-64.67~22.04.1 | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-ibm | 5.15.0-1072.75 | UBUNTU-CVE-2025-21690 |
| Ubuntu:24.04:LTS | linux-ibm | 6.8.0-1027.27 | USN-7595-1 |
| Ubuntu:24.04:LTS | linux-ibm | 6.8.0-1027.27 | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-ibm-6.8 | 6.8.0-1027.27~22.04.1 | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-intel-iot-realtime | 5.15.0-1073.75 | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-intel-iotg | 5.15.0-1075.81 | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-kvm | 5.15.0-1076.81 | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-lowlatency | 5.15.0-135.146 | UBUNTU-CVE-2025-21690 |
| Ubuntu:24.04:LTS | linux-lowlatency | 6.8.0-62.65.1 | USN-7595-1 |
| Ubuntu:24.04:LTS | linux-lowlatency | 6.8.0-62.65.1 | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-5.19 | no fix listed | UBUNTU-CVE-2025-21690 |
| Ubuntu:24.04:LTS | linux-lowlatency-hwe-6.11 | 6.11.0-1012.13~24.04.1 | USN-7445-1 |
| Ubuntu:24.04:LTS | linux-lowlatency-hwe-6.11 | 6.11.0-1012.13~24.04.1 | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.2 | no fix listed | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.5 | no fix listed | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.8 | 6.8.0-62.65.1~22.04.1 | USN-7595-1 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.8 | 6.8.0-62.65.1~22.04.1 | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-nvidia | 5.15.0-1074.75 | UBUNTU-CVE-2025-21690 |
| Ubuntu:24.04:LTS | linux-nvidia | 6.8.0-1029.32 | UBUNTU-CVE-2025-21690 |
| Ubuntu:24.04:LTS | linux-nvidia | 6.8.0-1029.32 | USN-7595-1 |
| Ubuntu:24.04:LTS | linux-nvidia-6.11 | 6.11.0-1007.7 | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-nvidia-6.2 | no fix listed | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-nvidia-6.5 | no fix listed | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-nvidia-6.8 | 6.8.0-1029.32~22.04.1 | USN-7595-1 |
| Ubuntu:22.04:LTS | linux-nvidia-6.8 | 6.8.0-1029.32~22.04.1 | UBUNTU-CVE-2025-21690 |
| Ubuntu:24.04:LTS | linux-nvidia-lowlatency | 6.8.0-1029.32.1 | USN-7595-1 |
| Ubuntu:24.04:LTS | linux-nvidia-lowlatency | 6.8.0-1029.32.1 | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra | 5.15.0-1033.33 | UBUNTU-CVE-2025-21690 |
| Ubuntu:24.04:LTS | linux-nvidia-tegra | 6.8.0-1008.8 | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra-igx | 5.15.0-1021.21 | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-oem-5.17 | no fix listed | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-oem-6.0 | no fix listed | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-oem-6.1 | no fix listed | UBUNTU-CVE-2025-21690 |
| Ubuntu:24.04:LTS | linux-oem-6.11 | 6.11.0-1020.20 | USN-7445-1 |
| Ubuntu:24.04:LTS | linux-oem-6.11 | 6.11.0-1020.20 | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-oem-6.5 | no fix listed | UBUNTU-CVE-2025-21690 |
| Ubuntu:24.04:LTS | linux-oem-6.8 | 6.8.0-1029.29 | UBUNTU-CVE-2025-21690 |
| Ubuntu:24.04:LTS | linux-oem-6.8 | 6.8.0-1029.29 | USN-7595-1 |
| Ubuntu:22.04:LTS | linux-oracle | 5.15.0-1077.83 | UBUNTU-CVE-2025-21690 |
| Ubuntu:24.04:LTS | linux-oracle | 6.8.0-1027.28 | UBUNTU-CVE-2025-21690 |
| Ubuntu:24.04:LTS | linux-oracle | 6.8.0-1027.28 | USN-7595-4 |
| Ubuntu:22.04:LTS | linux-oracle-6.5 | no fix listed | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-oracle-6.8 | 6.8.0-1027.28~22.04.1 | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-oracle-6.8 | 6.8.0-1027.28~22.04.1 | USN-7595-4 |
| Ubuntu:22.04:LTS | linux-raspi | 5.15.0-1074.77 | UBUNTU-CVE-2025-21690 |
| Ubuntu:24.04:LTS | linux-raspi | 6.8.0-1029.33 | UBUNTU-CVE-2025-21690 |
| Ubuntu:24.04:LTS | linux-raspi | 6.8.0-1029.33 | USN-7595-4 |
| Ubuntu:24.04:LTS | linux-raspi-realtime | no fix listed | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2025-21690 |
| Ubuntu:24.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2025-21690 |
| Ubuntu:24.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-riscv-5.19 | no fix listed | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-riscv-6.5 | no fix listed | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-riscv-6.8 | 6.8.0-62.65~22.04.1 | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-starfive-5.19 | no fix listed | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-starfive-6.2 | no fix listed | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-starfive-6.5 | no fix listed | UBUNTU-CVE-2025-21690 |
| Ubuntu:24.04:LTS | linux-xilinx | 6.8.0-1017.18 | UBUNTU-CVE-2025-21690 |
| Ubuntu:22.04:LTS | linux-xilinx-zynqmp | 5.15.0-1044.48 | UBUNTU-CVE-2025-21690 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | f8aea701b77c26732f151aab4f0a70e62eb53d86 – before 81d4dd05c412ba04f9f6b85b718e6da833be290cf8aea701b77c26732f151aab4f0a70e62eb53d86 – before 182a4b7c731e95c08cb47f14b87a272b6ab2b2daf8aea701b77c26732f151aab4f0a70e62eb53d86 – before 088bde862f8d3d0fc52e40e66a0484a246837087f8aea701b77c26732f151aab4f0a70e62eb53d86 – before 01d1ebdab9ccb73c952e1666a8a80abd194dbc55f8aea701b77c26732f151aab4f0a70e62eb53d86 – before d0f0af1bafef33b3e2aa8c3a4ef44db48df9b0eaf8aea701b77c26732f151aab4f0a70e62eb53d86 – before d2138eab8cde61e0e6f62d0713e45202e8457d6d |
| Linux | Linux | 4.5 |
Weakness: CWE-770 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
References
- https://git.kernel.org/stable/c/81d4dd05c412ba04f9f6b85b718e6da833be290c
- https://git.kernel.org/stable/c/182a4b7c731e95c08cb47f14b87a272b6ab2b2da
- https://git.kernel.org/stable/c/088bde862f8d3d0fc52e40e66a0484a246837087
- https://git.kernel.org/stable/c/01d1ebdab9ccb73c952e1666a8a80abd194dbc55
- https://git.kernel.org/stable/c/d0f0af1bafef33b3e2aa8c3a4ef44db48df9b0ea
- https://git.kernel.org/stable/c/d2138eab8cde61e0e6f62d0713e45202e8457d6d
- https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html