CVE-2025-21745

CVE-2025-21745

Medium · published February 27, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
17.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

blk-cgroup: Fix class @block_class's subsystem refcount leakage

blkcg_fill_root_iostats() iterates over @block_class's devices by

class_dev_iter_(init|next)(), but does not end iterating with

class_dev_iter_exit(), so causes the class's subsystem refcount leakage.

Fix by ending the iterating with class_dev_iter_exit().

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00266 · 17.8th percentile
Published
2025-02-27T08:15Z
Affected products (4)
ProductVersionsFixed in
linux/linux_kernel≥ 5.9, < 6.1.1296.1.129
linux/linux_kernel≥ 6.2, < 6.6.786.6.78
linux/linux_kernel≥ 6.7, < 6.12.146.12.14
linux/linux_kernel≥ 6.13, < 6.13.36.13.3
References (14)
https://git.kernel.org/stable/c/2ce09aabe009453d641a2ceb79e6461a2d4f3876 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/38287f779b34dfe959b4b681e909f2d3d52b88be · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/431b6ef2714be4d5babb802114987541a88b43b0 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/67c7f213e052b1aa6caba4a7e25e303bc6997126 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/993121481b5a87829f1e8163f47158b72679f309 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/d1248436cbef1f924c04255367ff4845ccd9025e · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/ffb494f1e7a047bd7a41b13796fcfb08fe5beafb · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-019113.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-082556.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-265688.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-457936.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-784472.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 27 FEB 02:12Z
    blk-cgroup: Fix class @block_class's subsystem refcount leakage
    cvelistv5