CVE-2025-21817CWE-667

CVE-2025-21817

Medium · published February 28, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
3.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

block: mark GFP_NOIO around sysfs ->store()

sysfs ->store is called with queue freezed, meantime we have several

->store() callbacks(update_nr_requests, wbt, scheduler) to allocate

memory with GFP_KERNEL which may run into direct reclaim code path,

then potential deadlock can be caused.

Fix the issue by marking NOIO around sysfs ->store()

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00150 · 3.8th percentile
Weakness
CWE-667 · Improper Locking
Published
2025-02-28T01:16Z
Affected products (1)
ProductVersionsFixed in
linux/linux_kernelall versions—
References (3)
EPSS history
Timeline
  • 27 FEB 20:04Z
    block: mark GFP_NOIO around sysfs ->store()
    cvelistv5