CVE-2025-40001

CVE-2025-40001 affects the Linux kernel SCSI mvsas driver. During Marvell SAS/SATA controller detach, the code calls cancel_delayed_work() for mwq->work_q. If the delayed work is already running, cancellation may fail, causing a use-after-free of mvs_info after free in mvs_free(), while mvs_wo...