CVE-2025-38709

CVE-2025-38709

Medium · published September 4, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
3.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

loop: Avoid updating block size under exclusive owner

Syzbot came up with a reproducer where a loop device block size is

changed underneath a mounted filesystem. This causes a mismatch between

the block device block size and the block size stored in the superblock

causing confusion in various places such as fs/buffer.c. The particular

issue triggered by syzbot was a warning in __getblk_slow() due to

requested buffer size not matching block device block size.

Fix the problem by getting exclusive hold of the loop device to change

its block size. This fails if somebody (such as filesystem) has already

an exclusive ownership of the block device and thus prevents modifying

the loop device under some exclusive owner which doesn't expect it.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00148 · 3.7th percentile
Published
2025-09-04T20:15Z
Affected products (4)
ProductVersionsFixed in
linux/linux_kernel< 6.6.1096.6.109
linux/linux_kernel≥ 6.7, < 6.12.436.12.43
linux/linux_kernel≥ 6.13, < 6.15.116.15.11
linux/linux_kernel≥ 6.16, < 6.16.26.16.2
References (5)
EPSS history
Timeline
  • 04 SEP 15:32Z
    loop: Avoid updating block size under exclusive owner
    cvelistv5