CVE-2025-21745
blk-cgroup: Fix class @block_class's subsystem refcount leakage
Published Feb 27, 2025
CVSS 3.1 · 5.5 Medium
EPSS < 1%
KEV · Not listed
Description
In the Linux kernel, the following vulnerability has been resolved:
blk-cgroup: Fix class @block_class's subsystem refcount leakage
blkcg_fill_root_iostats() iterates over @block_class's devices by
class_dev_iter_(init|next)(), but does not end iterating with
class_dev_iter_exit(), so causes the class's subsystem refcount leakage.
Fix by ending the iterating with class_dev_iter_exit().
blk-cgroup: Fix class @block_class's subsystem refcount leakage
blkcg_fill_root_iostats() iterates over @block_class's devices by
class_dev_iter_(init|next)(), but does not end iterating with
class_dev_iter_exit(), so causes the class's subsystem refcount leakage.
Fix by ending the iterating with class_dev_iter_exit().
Affected Products
-
CVE record
-
NVD configurations
-
Red Hat packages
No data
-
OpenCVE enrichment
No data
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Linux | Linux | unaffected |
|
||||||||||||||||||||||||||||||
| Linux | Linux | affected |
|
Configuration 1 [-]
|
No data.
No data available yet.
Remediation
Tracking
Advisories
| Source | ID | Title |
|---|---|---|
 Debian DLA |
DLA-4102-1 | linux-6.1 security update |
| Debian DLA |
DLA-4178-1 | linux security update |
 EUVD |
EUVD-2025-5179 | In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Fix class @block_class's subsystem refcount leakage blkcg_fill_root_iostats() iterates over @block_class's devices by class_dev_iter_(init|next)(), but does not end iterating with class_dev_iter_exit(), so causes the class's subsystem refcount leakage. Fix by ending the iterating with class_dev_iter_exit(). |
 Ubuntu USN |
USN-7510-1 | Linux kernel vulnerabilities |
| Ubuntu USN |
USN-7510-2 | Linux kernel (FIPS) vulnerabilities |
| Ubuntu USN |
USN-7510-3 | Linux kernel vulnerabilities |
| Ubuntu USN |
USN-7510-4 | Linux kernel (Real-time) vulnerabilities |
| Ubuntu USN |
USN-7510-5 | Linux kernel (Azure FIPS) vulnerabilities |
| Ubuntu USN |
USN-7510-6 | Linux kernel (AWS FIPS) vulnerabilities |
| Ubuntu USN |
USN-7510-7 | Linux kernel vulnerabilities |
| Ubuntu USN |
USN-7510-8 | Linux kernel (AWS) vulnerabilities |
| Ubuntu USN |
USN-7511-1 | Linux kernel (GCP) vulnerabilities |
| Ubuntu USN |
USN-7511-2 | Linux kernel (GCP FIPS) vulnerabilities |
| Ubuntu USN |
USN-7511-3 | Linux kernel (GKE) vulnerabilities |
| Ubuntu USN |
USN-7512-1 | Linux kernel (GCP) vulnerabilities |
| Ubuntu USN |
USN-7521-1 | Linux kernel vulnerabilities |
| Ubuntu USN |
USN-7521-2 | Linux kernel (AWS) vulnerabilities |
| Ubuntu USN |
USN-7521-3 | Linux kernel vulnerabilities |
| Ubuntu USN |
USN-7593-1 | Linux kernel (HWE) vulnerabilities |
| Ubuntu USN |
USN-7602-1 | Linux kernel (Xilinx ZynqMP) vulnerabilities |
| Ubuntu USN |
USN-7651-1 | Linux kernel vulnerabilities |
| Ubuntu USN |
USN-7651-2 | Linux kernel vulnerabilities |
| Ubuntu USN |
USN-7651-3 | Linux kernel vulnerabilities |
| Ubuntu USN |
USN-7651-4 | Linux kernel (GCP) vulnerabilities |
| Ubuntu USN |
USN-7651-5 | Linux kernel (Raspberry Pi Real-time) vulnerabilities |
| Ubuntu USN |
USN-7651-6 | Linux kernel (Raspberry Pi) vulnerabilities |
| Ubuntu USN |
USN-7652-1 | Linux kernel (Real-time) vulnerabilities |
| Ubuntu USN |
USN-7653-1 | Linux kernel (HWE) vulnerabilities |
| Ubuntu USN |
USN-7737-1 | Linux kernel (Azure) vulnerabilities |
Metrics
No CVSS v4.0
Attack Vector Local
Attack Complexity Low
Privileges Required Low
Scope Unchanged
Confidentiality Impact None
Integrity Impact None
Availability Impact High
User Interaction None
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.266% probability within 30 days)
Key SSVC decision points have not yet been added.
References
History
Oct 15, 2026 2:30 AM
Added references
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
May 12, 2026 1:30 PM
Added references
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Nov 3, 2025 8:30 PM
Added references
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Apr 2, 2025 3:15 AM
Weaknesses updated
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-401 |
Mar 13, 2025 12:30 PM
Added references
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Mar 5, 2025 7:15 PM
First appearance in the feed. Weaknesses updated. Affected versions updated. Affected vendors updated
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Linux
Linux linux Kernel |
|
| Weaknesses | NVD-CWE-Other | |
| CPEs | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Linux
Linux linux Kernel |
Feb 28, 2025 2:00 AM
Added references. Scoring metrics updated
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| References |
| |
| Metrics |
threat_severity
|
cvssV3_1
|
Feb 27, 2025 2:45 AM
Description updated. Title updated. Added references
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Fix class @block_class's subsystem refcount leakage blkcg_fill_root_iostats() iterates over @block_class's devices by class_dev_iter_(init|next)(), but does not end iterating with class_dev_iter_exit(), so causes the class's subsystem refcount leakage. Fix by ending the iterating with class_dev_iter_exit(). | |
| Title | blk-cgroup: Fix class @block_class's subsystem refcount leakage | |
| References |
|
|
Subscriptions
Weaknesses
