CVE-2025-21817

Medium

Description

In the Linux kernel, the following vulnerability has been resolved: block: mark GFP_NOIO around sysfs ->store() sysfs ->store is called with queue freezed, meantime we have several ->store() callbacks(update_nr_requests, wbt, scheduler) to allocate memory with GFP_KERNEL which may run into direct reclaim code path, then potential deadlock can be caused. Fix the issue by marking NOIO around sysfs ->store()

SeverityMedium

CVSS5.5

Exploit probability—

Product

Linux Kernel

PublishedFeb 27, 2025

First seenFeb 27, 2025

Weakness typeCWE-667CWE-667

How to fix

Patches

git.kernel.org/stable/c/2566ce907e5d5db8a039647208e029ce559baa31
git.kernel.org/stable/c/7c0be4ead1f8f5f8be0803f347de0de81e3b8e1c

Affected products

Product	Affected versions	Fixed in
linux linux_kernel	6.13.2	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.