CVE-2025-21690

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-21690
In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Ratelimit warning logs to prevent VM denial of service If there's a persistent error in the hypervisor, the SCSI warning for failed I/O can flood the kernel log and max out CPU utilization, preventing troubleshooting from the VM side. Ratelimit the warning so it doesn't DoS the VM.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/01d1ebdab9ccb73c952e1666a8a80abd194dbc55 Patch
https://git.kernel.org/stable/c/088bde862f8d3d0fc52e40e66a0484a246837087 Patch
https://git.kernel.org/stable/c/182a4b7c731e95c08cb47f14b87a272b6ab2b2da Patch
https://git.kernel.org/stable/c/81d4dd05c412ba04f9f6b85b718e6da833be290c Patch
https://git.kernel.org/stable/c/d0f0af1bafef33b3e2aa8c3a4ef44db48df9b0ea Patch
https://git.kernel.org/stable/c/d2138eab8cde61e0e6f62d0713e45202e8457d6d Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc7:*:*:*:*:*:*
History

21 Feb 2025, 16:30

Type Values Removed Values Added
CWE CWE-770
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: scsi: storvsc: Limite la velocidad de los registros de advertencia para evitar la denegación de servicio de la máquina virtual. Si hay un error persistente en el hipervisor, la advertencia de SCSI por E/S fallida puede inundar el registro del kernel y maximizar la utilización de la CPU, lo que impide la resolución de problemas desde el lado de la máquina virtual. Limite la velocidad de la advertencia para que no realice un ataque de denegación de servicio (DoS) a la máquina virtual.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/01d1ebdab9ccb73c952e1666a8a80abd194dbc55 - () https://git.kernel.org/stable/c/01d1ebdab9ccb73c952e1666a8a80abd194dbc55 - Patch
References () https://git.kernel.org/stable/c/088bde862f8d3d0fc52e40e66a0484a246837087 - () https://git.kernel.org/stable/c/088bde862f8d3d0fc52e40e66a0484a246837087 - Patch
References () https://git.kernel.org/stable/c/182a4b7c731e95c08cb47f14b87a272b6ab2b2da - () https://git.kernel.org/stable/c/182a4b7c731e95c08cb47f14b87a272b6ab2b2da - Patch
References () https://git.kernel.org/stable/c/81d4dd05c412ba04f9f6b85b718e6da833be290c - () https://git.kernel.org/stable/c/81d4dd05c412ba04f9f6b85b718e6da833be290c - Patch
References () https://git.kernel.org/stable/c/d0f0af1bafef33b3e2aa8c3a4ef44db48df9b0ea - () https://git.kernel.org/stable/c/d0f0af1bafef33b3e2aa8c3a4ef44db48df9b0ea - Patch
References () https://git.kernel.org/stable/c/d2138eab8cde61e0e6f62d0713e45202e8457d6d - () https://git.kernel.org/stable/c/d2138eab8cde61e0e6f62d0713e45202e8457d6d - Patch
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:6.13:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:*

10 Feb 2025, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-10 16:15

Updated : 2025-02-21 16:30

NVD link : CVE-2025-21690

Mitre link : CVE-2025-21690

CVE.ORG link : CVE-2025-21690

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-770

Allocation of Resources Without Limits or Throttling