Riskcovery

CVE-2025-37978

block: integrity: Do not call set_page_dirty_lock()

State
Published
Severity
Not scored
Published
May 20, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

block: integrity: Do not call set_page_dirty_lock()

Placing multiple protection information buffers inside the same page can lead to oopses because set_page_dirty_lock() can't be called from interrupt context.

Since a protection information buffer is not backed by a file there is no point in setting its page dirty, there is nothing to synchronize. Drop the call to set_page_dirty_lock() and remove the last argument to bio_integrity_unpin_bvec().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 492c5d455969fc2e829f26ed4c83487b068f0dd7 to before c38a005e6efb9ddfa06bd8353b82379d6fd5d6c4Affected
  • 492c5d455969fc2e829f26ed4c83487b068f0dd7 to before 9487fc1a10b3aa89feb24e7cedeccaaf63074617Affected
  • 492c5d455969fc2e829f26ed4c83487b068f0dd7 to before 39e160505198ff8c158f11bce2ba19809a756e8bAffected
LinuxLinux
  • 6.8Affected
  • before 6.8Not affected
  • 6.12.25 through 6.12.*Not affected
  • 6.14.4 through 6.14.*Not affected
  • 6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.