CVE-2025-21690

Summary

In the Linux kernel, the following vulnerability has been resolved:

scsi: storvsc: Ratelimit warning logs to prevent VM denial of service

If there's a persistent error in the hypervisor, the SCSI warning for failed I/O can flood the kernel log and max out CPU utilization, preventing troubleshooting from the VM side. Ratelimit the warning so it doesn't DoS the VM.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxf8aea701b77c26732f151aab4f0a70e62eb53d86 < 81d4dd05c412ba04f9f6b85b718e6da833be290caffected
LinuxLinuxf8aea701b77c26732f151aab4f0a70e62eb53d86 < 182a4b7c731e95c08cb47f14b87a272b6ab2b2daaffected
LinuxLinuxf8aea701b77c26732f151aab4f0a70e62eb53d86 < 088bde862f8d3d0fc52e40e66a0484a246837087affected
LinuxLinuxf8aea701b77c26732f151aab4f0a70e62eb53d86 < 01d1ebdab9ccb73c952e1666a8a80abd194dbc55affected
LinuxLinuxf8aea701b77c26732f151aab4f0a70e62eb53d86 < d0f0af1bafef33b3e2aa8c3a4ef44db48df9b0eaaffected
LinuxLinuxf8aea701b77c26732f151aab4f0a70e62eb53d86 < d2138eab8cde61e0e6f62d0713e45202e8457d6daffected
LinuxLinux4.5affected
LinuxLinux0 < 4.5unaffected
LinuxLinux5.15.178 <= 5.15.*unaffected
LinuxLinux6.1.128 <= 6.1.*unaffected
LinuxLinux6.6.75 <= 6.6.*unaffected
LinuxLinux6.12.12 <= 6.12.*unaffected
LinuxLinux6.13.1 <= 6.13.*unaffected
LinuxLinux6.14 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References