CVE-2025-21690

scsi: storvsc: Ratelimit warning logs to prevent VM denial of service

Medium · published February 10, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
11.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

scsi: storvsc: Ratelimit warning logs to prevent VM denial of service

If there's a persistent error in the hypervisor, the SCSI warning for

failed I/O can flood the kernel log and max out CPU utilization,

preventing troubleshooting from the VM side. Ratelimit the warning so

it doesn't DoS the VM.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00215 · 11.3th percentile
Published
2025-02-10T15:58Z
EPSS history
Timeline
  • 10 FEB 15:58Z
    scsi: storvsc: Ratelimit warning logs to prevent VM denial of service
    cvelistv5