Riskcovery

CVE-2025-21690

scsi: storvsc: Ratelimit warning logs to prevent VM denial of service

State
Published
Severity
5.5 Medium
Published
Feb 10, 2025
Updated
May 11, 2026
Reserved
Dec 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: storvsc: Ratelimit warning logs to prevent VM denial of service

If there's a persistent error in the hypervisor, the SCSI warning for failed I/O can flood the kernel log and max out CPU utilization, preventing troubleshooting from the VM side. Ratelimit the warning so it doesn't DoS the VM.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

  • CWE-770 Allocation of Resources Without Limits or Throttling

Affected Products

ProductVersions
LinuxLinux
  • f8aea701b77c26732f151aab4f0a70e62eb53d86 to before 81d4dd05c412ba04f9f6b85b718e6da833be290cAffected
  • f8aea701b77c26732f151aab4f0a70e62eb53d86 to before 182a4b7c731e95c08cb47f14b87a272b6ab2b2daAffected
  • f8aea701b77c26732f151aab4f0a70e62eb53d86 to before 088bde862f8d3d0fc52e40e66a0484a246837087Affected
  • f8aea701b77c26732f151aab4f0a70e62eb53d86 to before 01d1ebdab9ccb73c952e1666a8a80abd194dbc55Affected
  • f8aea701b77c26732f151aab4f0a70e62eb53d86 to before d0f0af1bafef33b3e2aa8c3a4ef44db48df9b0eaAffected
  • f8aea701b77c26732f151aab4f0a70e62eb53d86 to before d2138eab8cde61e0e6f62d0713e45202e8457d6dAffected
LinuxLinux
  • 4.5Affected
  • before 4.5Not affected
  • 5.15.178 through 5.15.*Not affected
  • 6.1.128 through 6.1.*Not affected
  • 6.6.75 through 6.6.*Not affected
  • 6.12.12 through 6.12.*Not affected
  • 6.13.1 through 6.13.*Not affected
  • 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.