NetSight
medium5.5

CVE-2025-21745

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Fix class @block_class's subsystem refcount leakage blkcg_fill_root_iostats() i…

Impact

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Fix class @block_class's subsystem refcount leakage blkcg_fill_root_iostats() iterates over @block_class's devices by class_dev_iter_(init|next)(), but does not end iterating with class_dev_iter_exit(), so causes the class's subsystem refcount leakage. Fix by ending the iterating with class_dev_iter_exit().

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.9 before 6.1.129
from 6.2 before 6.6.78
from 6.7 before 6.12.14
from 6.13 before 6.13.3

References