CVE-2025-21832

CVE-2025-21832

High · published March 6, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
8.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

block: don't revert iter for -EIOCBQUEUED

blkdev_read_iter() has a few odd checks, like gating the position and

count adjustment on whether or not the result is bigger-than-or-equal to

zero (where bigger than makes more sense), and not checking the return

value of blkdev_direct_IO() before doing an iov_iter_revert(). The

latter can lead to attempting to revert with a negative value, which

when passed to iov_iter_revert() as an unsigned value will lead to

throwing a WARN_ON() because unroll is bigger than MAX_RW_COUNT.

Be sane and don't revert for -EIOCBQUEUED, like what is done in other

spots.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00191 · 8.3th percentile
Published
2025-03-06T22:15Z
Affected products (11)
ProductVersionsFixed in
linux/linux_kernel≥ 5.17.1, < 6.1.1296.1.129
linux/linux_kernel≥ 6.2, < 6.6.786.6.78
linux/linux_kernel≥ 6.7, < 6.12.146.12.14
linux/linux_kernel≥ 6.13, < 6.13.36.13.3
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (7)
EPSS history
Timeline
  • 06 MAR 16:22Z
    block: don't revert iter for -EIOCBQUEUED
    cvelistv5