Riskcovery

CVE-2025-21745

blk-cgroup: Fix class @block_class's subsystem refcount leakage

State
Published
Severity
Not scored
Published
Feb 27, 2025
Updated
Oct 15, 2026
Reserved
Dec 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

blk-cgroup: Fix class @block_class's subsystem refcount leakage

blkcg_fill_root_iostats() iterates over @block_class's devices by class_dev_iter_(init|next)(), but does not end iterating with class_dev_iter_exit(), so causes the class's subsystem refcount leakage.

Fix by ending the iterating with class_dev_iter_exit().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • ef45fe470e1e5410db4af87abc5d5055427945ac to before ffb494f1e7a047bd7a41b13796fcfb08fe5beafbAffected
  • ef45fe470e1e5410db4af87abc5d5055427945ac to before 38287f779b34dfe959b4b681e909f2d3d52b88beAffected
  • ef45fe470e1e5410db4af87abc5d5055427945ac to before 431b6ef2714be4d5babb802114987541a88b43b0Affected
  • ef45fe470e1e5410db4af87abc5d5055427945ac to before 993121481b5a87829f1e8163f47158b72679f309Affected
  • ef45fe470e1e5410db4af87abc5d5055427945ac to before 2ce09aabe009453d641a2ceb79e6461a2d4f3876Affected
  • ef45fe470e1e5410db4af87abc5d5055427945ac to before 67c7f213e052b1aa6caba4a7e25e303bc6997126Affected
  • ef45fe470e1e5410db4af87abc5d5055427945ac to before d1248436cbef1f924c04255367ff4845ccd9025eAffected
LinuxLinux
  • 5.9Affected
  • before 5.9Not affected
  • 5.10.235 through 5.10.*Not affected
  • 5.15.179 through 5.15.*Not affected
  • 6.1.129 through 6.1.*Not affected
  • 6.6.78 through 6.6.*Not affected
  • 6.12.14 through 6.12.*Not affected
  • 6.13.3 through 6.13.*Not affected
  • 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.