CVE-2025-39803CWE-617

CVE-2025-39803

High · published September 15, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
3.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

scsi: ufs: core: Remove WARN_ON_ONCE() call from ufshcd_uic_cmd_compl()

The UIC completion interrupt may be disabled while an UIC command is

being processed. When the UIC completion interrupt is reenabled, an UIC

interrupt is triggered and the WARN_ON_ONCE(!cmd) statement is hit.

Hence this patch that removes this kernel warning.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00146 · 3.5th percentile
Weakness
CWE-617 · Reachable Assertion
Published
2025-09-15T17:15Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel≥ 6.13, < 6.16.46.16.4
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (2)
https://git.kernel.org/stable/c/c0cc24c139e0f62859dbf88e050ba074cd93988f · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/e5203d89d59bfcbe1f348aa0d2dc4449a8ba644c · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 15 SEP 12:36Z
    scsi: ufs: core: Remove WARN_ON_ONCE() call from ufshcd_uic_cmd_compl()
    cvelistv5