Log in Start free

Vulnerability · Published May 9, 2025 · Assigned by Linux

CVE-2025-37861scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue

High 7.8

In plain English

A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 26% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.3%top 74.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue When the task management thread processes reply queues while the reset thread resets them, the task management thread accesses an invalid queue ID (0xFFFF), set by the reset thread, which points to unallocated memory, causing a crash. Add flag 'io_admin_reset_sync' to synchronize access between the reset, I/O, and admin threads. Before a reset, the reset handler sets this flag to block I/O and admin processing threads. If any thread bypasses the initial check, the reset thread waits up to 10 seconds for processing to finish. If the wait exceeds 10 seconds, the controller is marked as unrecoverable.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linuxno fix listedDEBIAN-CVE-2025-37861
Debian:13linux6.12.25-1DEBIAN-CVE-2025-37861
Debian:14linux6.12.25-1DEBIAN-CVE-2025-37861
Ubuntu:22.04:LTSlinux5.15.0-202.212USN-8961-1
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2025-37861
Ubuntu:24.04:LTSlinux6.8.0-100.100UBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-aws5.15.0-1119.126USN-8961-1
Ubuntu:22.04:LTSlinux-aws5.15.0-1119.126UBUNTU-CVE-2025-37861
Ubuntu:24.04:LTSlinux-aws6.8.0-1046.49UBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1046.49~22.04.1UBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-azure5.15.0-1125.134UBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-azure5.15.0-1125.134USN-8961-1
Ubuntu:24.04:LTSlinux-azure6.8.0-1046.52UBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2025-37861
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1051.57~22.04.1UBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1124.133UBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1124.133USN-8962-1
Ubuntu:24.04:LTSlinux-azure-fde6.8.0-1046.53UBUNTU-CVE-2025-37861
Ubuntu:25.10linux-azure-fdeno fix listedUBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-azure-fde-6.86.8.0-1046.53~22.04.1UBUNTU-CVE-2025-37861
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-gcp5.15.0-1120.130USN-8961-1
Ubuntu:22.04:LTSlinux-gcp5.15.0-1120.130UBUNTU-CVE-2025-37861
Ubuntu:24.04:LTSlinux-gcp6.8.0-1047.50UBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2025-37861
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1047.50~22.04.2UBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-gke5.15.0-1115.121USN-8961-1
Ubuntu:22.04:LTSlinux-gke5.15.0-1115.121UBUNTU-CVE-2025-37861
Ubuntu:24.04:LTSlinux-gke6.8.0-1043.48UBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1102.110USN-8961-1
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1102.110UBUNTU-CVE-2025-37861
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1030.33UBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2025-37861
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-100.100~22.04.1UBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-ibm5.15.0-1113.117UBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-ibm5.15.0-1113.117USN-8961-1
Ubuntu:24.04:LTSlinux-ibm6.8.0-1044.44UBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1044.44~22.04.1UBUNTU-CVE-2025-37861
Ubuntu:24.04:LTSlinux-intelno fix listedUBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1114.120USN-8961-1
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1114.120UBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-kvm5.15.0-1111.116UBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-kvm5.15.0-1111.116USN-8961-1
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-197.207USN-8961-1
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-197.207UBUNTU-CVE-2025-37861
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-100.100.1UBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2025-37861
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-100.100.1~22.04.1UBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1114.115UBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1114.115USN-8961-1
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1046.49UBUNTU-CVE-2025-37861
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1046.49~22.04.1UBUNTU-CVE-2025-37861
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1046.49.1UBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1070.72USN-8963-1
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1070.72UBUNTU-CVE-2025-37861
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1020.20UBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1059.59UBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1059.59USN-8963-1
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2025-37861
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2025-37861
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-oracle5.15.0-1116.122UBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-oracle5.15.0-1116.122USN-8961-1
Ubuntu:24.04:LTSlinux-oracle6.8.0-1043.44UBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1043.44~22.04.1UBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2025-37861
Ubuntu:24.04:LTSlinux-raspi6.8.0-1047.51UBUNTU-CVE-2025-37861
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-37861
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-37861
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-100.100~22.04.1UBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2025-37861
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1023.24UBUNTU-CVE-2025-37861
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2025-37861

Affected products (as reported)

VendorProductVersions
Linux Linux c4f7ac64616ee513f9ac4ae6c4d8c3cccb6974df – before e9efbd037b9002ce9dd012da612e857e98dfcb3ec4f7ac64616ee513f9ac4ae6c4d8c3cccb6974df – before 31dad8d385953a886e57df70ab43ee25ba37797cc4f7ac64616ee513f9ac4ae6c4d8c3cccb6974df – before 65ba18c84dbd03afe9b38c06c151239d97a09834c4f7ac64616ee513f9ac4ae6c4d8c3cccb6974df – before 8d310d66e2b0f5f9f709764641647e8a3a4924fac4f7ac64616ee513f9ac4ae6c4d8c3cccb6974df – before 75b67dca4195e11ccf966a704787b2aa2754a457c4f7ac64616ee513f9ac4ae6c4d8c3cccb6974df – before f195fc060c738d303a21fae146dbf85e1595fb4c
Linux Linux 5.14

References