CVE-2025-39999: 
Linux Kernel vulnerability analysis and mitigation

CVE-2025-39999 affects the Linux kernel and involves a double free vulnerability in the block multiqueue (blk-mq) subsystem. The vulnerability was discovered and disclosed on October 15, 2025, specifically related to the handling of tags when the nr_requests queue attribute is modified (NVD).

The vulnerability occurs when users trigger tags growth through the queue sysfs attribute nr_requests. When this happens, hctx->sched_tags is freed directly and replaced with newly allocated tags during the blk_mq_tag_update_depth() operation. The issue arises because hctx->sched_tags is derived from elevator->et->tags, while et->tags still references the freed tags. This leads to a double free condition when the elevator exits, resulting in a kernel panic (NVD).

When exploited, this vulnerability can cause a kernel panic, leading to system crashes and potential denial of service conditions. The issue affects the block layer functionality of the Linux kernel, which is critical for storage operations (NVD).

The fix involves replacing et->tags with newly allocated tags alongside the hctx->sched_tags replacement. However, it's noted that there are some long-term problems that will require additional refactoring to be fixed thoroughly (NVD).