CVE-2025-21850

Summary

CVE-2025-21850 is a vulnerability affecting the Linux kernel that can result in a crash when disabling a namespace in the nvmet driver. The namespace percpu counter, which protects pending I/O, must be safely disabled once the counter drops to zero. If the queue is already torn down when calling submit_ bio(), attempting to disable the namespace can lead to a null pointer dereference and subsequent crash. This issue has been resolved by initializing the percpu counter in nvmet_ns_enable() and waiting for it to drop to zero in nvmet_ns_disable().

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.