CVE-2025-38326

aoe: clean device rq_list in aoedev_downdev()

State: Published
Severity: Not scored
Published: Jul 10, 2025
Updated: May 11, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

aoe: clean device rq_list in aoedev_downdev()

An aoe device's rq_list contains accepted block requests that are waiting to be transmitted to the aoe target. This queue was added as part of the conversion to blk_mq. However, the queue was not cleaned out when an aoe device is downed which caused blk_mq_freeze_queue() to sleep indefinitely waiting for those requests to complete, causing a hang. This fix cleans out the queue before calling blk_mq_freeze_queue().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	3582dd291788e9441c3ba9047e55089edb98da5c to before ed52e9652ba41d362e9ec923077f6da23336f269Affected 3582dd291788e9441c3ba9047e55089edb98da5c to before 64fc0bad62ed38874131dd0337d844a43bd1017eAffected 3582dd291788e9441c3ba9047e55089edb98da5c to before ef0b5bbbed7f220db2e9c73428f9a36e8dfc69caAffected 3582dd291788e9441c3ba9047e55089edb98da5c to before 531aef4a1accb13b21a3b82ec29955f4733367d5Affected 3582dd291788e9441c3ba9047e55089edb98da5c to before 8662ac79a63488e279b91c12a72b02bc0dc49f7bAffected 3582dd291788e9441c3ba9047e55089edb98da5c to before fa2a79f0da92614c5dc45c8b3d2638681c7734eeAffected 3582dd291788e9441c3ba9047e55089edb98da5c to before 00be74e1470af292c37a438b8e69dee47dcbf481Affected 3582dd291788e9441c3ba9047e55089edb98da5c to before 7f90d45e57cb2ef1f0adcaf925ddffdfc5e680caAffected
LinuxLinux	4.20Affected before 4.20Not affected 5.4.295 through 5.4.Not affected 5.10.239 through 5.10.Not affected 5.15.186 through 5.15.Not affected 6.1.142 through 6.1.Not affected 6.6.95 through 6.6.Not affected 6.12.35 through 6.12.Not affected 6.15.4 through 6.15.*Not affected 6.16 and laterNot affected

Product

Versions

LinuxLinux

3582dd291788e9441c3ba9047e55089edb98da5c to before ed52e9652ba41d362e9ec923077f6da23336f269Affected
3582dd291788e9441c3ba9047e55089edb98da5c to before 64fc0bad62ed38874131dd0337d844a43bd1017eAffected
3582dd291788e9441c3ba9047e55089edb98da5c to before ef0b5bbbed7f220db2e9c73428f9a36e8dfc69caAffected
3582dd291788e9441c3ba9047e55089edb98da5c to before 531aef4a1accb13b21a3b82ec29955f4733367d5Affected
3582dd291788e9441c3ba9047e55089edb98da5c to before 8662ac79a63488e279b91c12a72b02bc0dc49f7bAffected
3582dd291788e9441c3ba9047e55089edb98da5c to before fa2a79f0da92614c5dc45c8b3d2638681c7734eeAffected
3582dd291788e9441c3ba9047e55089edb98da5c to before 00be74e1470af292c37a438b8e69dee47dcbf481Affected
3582dd291788e9441c3ba9047e55089edb98da5c to before 7f90d45e57cb2ef1f0adcaf925ddffdfc5e680caAffected

LinuxLinux

4.20Affected
before 4.20Not affected
5.4.295 through 5.4.*Not affected
5.10.239 through 5.10.*Not affected
5.15.186 through 5.15.*Not affected
6.1.142 through 6.1.*Not affected
6.6.95 through 6.6.*Not affected
6.12.35 through 6.12.*Not affected
6.15.4 through 6.15.*Not affected
6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.