Critical Vulnerability in Linux Kernel: Synchronous Access Issue in MPI3MR Driver
Summary
CVE-2025-37861: In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue When the task management thread processes reply queues while the reset thread r... Affects linux versions 6.1.106-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of many operating systems, providing essential services for hardware and software interaction. It is known for its stability, performance, and flexibility, making it a popular choice for servers, desktops, and embedded systems. The MPI3MR driver, part of the SCSI subsystem, manages communication between the operating system and storage devices. This vulnerability arises from improper synchronization between threads, potentially leading to system crashes.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the MPI3MR driver where the task management thread can access an invalid queue ID (0xFFFF) while processing reply queues. This occurs when the reset thread resets these queues, leading to a crash due to access to unallocated memory. The vulnerability can result in system instability and data loss, especially in environments relying on the SCSI subsystem for storage operations. The issue stems from a lack of synchronization between the reset and task management threads, which can be exploited if not addressed.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can manually ensure that no I/O or admin processing threads are active before initiating a reset. This can be done by monitoring the system processes and ensuring that the reset handler is executed only when it is safe to do so.
Conclusion
The CVE-2025-37861 vulnerability in the Linux kernel's MPI3MR driver poses a significant risk to system stability and data integrity. It is crucial for users to apply the necessary updates to mitigate this risk. Additionally, utilizing tools like Vulert can help in monitoring and managing vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
CVE-2025-37861 is a vulnerability in the Linux kernel's MPI3MR driver that can cause system crashes due to improper synchronization between threads.
This vulnerability can lead to system instability and potential data loss, particularly in environments that utilize SCSI storage devices.
Yes, a patch is available for Debian 13 in version 6.12.25-1. Users of Debian 11 and 12 should check for updates.
As a temporary measure, ensure that no I/O or admin processing threads are active before performing a reset to avoid triggering the vulnerability.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time using just a manifest file like package-lock.json. You can check your application for vulnerabilities without signup at the Vulert playground.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
