CVE-2025-38302
Medium
Description
In the Linux kernel, the following vulnerability has been resolved: block: don't use submit_bio_noacct_nocheck in blk_zone_wplug_bio_work Bios queued up in the zone write plug have already gone through all all preparation in the submit_bio path, including the freeze protection. Submitting them through submit_bio_noacct_nocheck duplicates the work and can can cause deadlocks when freezing a queue with pending bio write plugs. Go straight to ->submit_bio or blk_mq_submit_bio to bypass the superfluous extra freeze protection and checks.
SeverityMedium
CVSS5.5
Exploit probability—
Product
Linux Kernel
PublishedJul 10, 2025
First seenJul 10, 2025
Weakness typeCWE-667CWE-667
How to fix
Update
- linux linux_kernel6.12.34, 6.15.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 6.10 ≤ v < 6.12.34, 6.13 ≤ v < 6.15.3, 6.16 | 6.12.34, 6.15.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.