Critical Vulnerability in Linux Kernel: Multiple Issues with vhost_scsi_set_endpoint
Summary
DEBIAN-CVE-2025-22083: In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint If vhost_scsi_set_endpoint is called multiple times without a vhost_scsi_clear_end... Affects linux versions < 6.12.25-1. Fixed in 6.12.25-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of the operating system, responsible for managing hardware resources and providing essential services to applications. It supports various functionalities, including process management, memory management, and device control. The kernel is crucial for system stability and performance, making its security paramount. This specific vulnerability affects the vhost-scsi subsystem, which facilitates communication between virtual machines and SCSI devices, highlighting a significant risk in environments utilizing virtualization technologies.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the vhost-scsi subsystem related to the handling of multiple calls to the vhost_scsi_set_endpoint function. This can lead to several critical issues, including use-after-free errors, hangs during target directory removal, and target portal group (TPG) leaks. The vulnerability arises when vhost_scsi_set_endpoint is called multiple times without a corresponding vhost_scsi_clear_endpoint, resulting in improper memory management and potential system instability. The major user of this functionality, QEMU, has implemented checks to prevent this misuse, but the underlying vulnerability remains a concern for other users.
How To Fix
Minimum fixed version
6.12.25-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users should avoid calling vhost_scsi_set_endpoint multiple times without first invoking vhost_scsi_clear_endpoint. This practice will help prevent the issues associated with the vulnerability until an update can be applied.
Conclusion
The vulnerability in the Linux kernel's vhost-scsi subsystem presents significant risks, particularly in virtualized environments. Users are strongly advised to update to the patched version to mitigate these risks. Implementing best practices, such as avoiding multiple calls to vhost_scsi_set_endpoint, can provide temporary relief until the update is applied.
See every vulnerability recorded for linux →
FAQ
The vhost-scsi subsystem is part of the Linux kernel that facilitates communication between virtual machines and SCSI devices, enabling efficient data transfer in virtualized environments.
The risks include potential system crashes due to use-after-free errors, hangs during target directory removal, and leaks of target portal groups, which can lead to system instability and data loss.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without requiring any signup.
Yes, the vulnerability affects specific versions of the Linux package in Debian 13 and Debian 14 prior to version 6.12.25-1.
If an immediate update is not possible, ensure to avoid multiple calls to vhost_scsi_set_endpoint without clearing the endpoint first, as a temporary measure to mitigate risks.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
