From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id CB05C1624C0 for ; Thu, 27 Feb 2025 02:13:22 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=10.30.226.201 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1740622402; cv=none; b=d5bo6DBDBiscH6PdINWaPEOd6oWi8m5pa6WxiC6MpiNkiFLYaeYJWrbDY74nEWG7JaVqsr5P6EujKlngpnrCr+Ejc04ANXPMdmLpBfxAqVbGIZ6OHko4uGCfPDDXB8IFY7HGZEhq/IZDmP6YVruf9D7Yj9ZP15OGLwZP94eVYXA= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1740622402; c=relaxed/simple; bh=EGcucgToxcdQU4eiUGi/4zHnn4zcnmwbTOAjuxH9np0=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=PEQWE7fMjkweMt7ZLFOkhVN9NpvLKp7gednMTiFmZtg3vXGa1ZaPSlzCxStDk2UC0VXqGkFYStx7giIrakDG8c5iRf9GGmW550zvlPqOWWhd35Khl0O3oDZ99+OTOqA+CxuKJOIr1A31Mb9OApcPPd0HmI+LkH8Lcj8KDAvRl6k= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b=bPRxuhDs; arc=none smtp.client-ip=10.30.226.201 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b="bPRxuhDs" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 9AE82C4CED6; Thu, 27 Feb 2025 02:13:22 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=linuxfoundation.org; s=korg; t=1740622402; bh=EGcucgToxcdQU4eiUGi/4zHnn4zcnmwbTOAjuxH9np0=; h=From:To:Cc:Subject:Date:Reply-to:From; b=bPRxuhDstOOQ1z/iWvNe4pRdRueLATzTkilAUP86tGqo/3ze3hFm4TbUFNqe3Bhg0 YRzVeY+gfDOCMIW3VXthKe5pWmQmlLiTzTPrk/xbb5RYL8Dv80rZLpa7FT7lZeskuk ewFfvVfvL69QDPxUtcfUD7EtULjpEdiedKwP+2mI= From: Greg Kroah-Hartman To: linux-cve-announce@vger.kernel.org Cc: Greg Kroah-Hartman Subject: CVE-2025-21745: blk-cgroup: Fix class @block_class's subsystem refcount leakage Date: Wed, 26 Feb 2025 18:11:27 -0800 Message-ID: <2025022600-CVE-2025-21745-19ee@gregkh> X-Mailer: git-send-email 2.48.1 Precedence: bulk X-Mailing-List: linux-cve-announce@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Reply-to: , X-Developer-Signature: v=1; a=openpgp-sha256; l=2711; i=gregkh@linuxfoundation.org; h=from:subject:message-id; bh=EGcucgToxcdQU4eiUGi/4zHnn4zcnmwbTOAjuxH9np0=; b=owGbwMvMwCRo6H6F97bub03G02pJDOn7T25RXnt8kdK+o5buF7fr6Xzz1wpLyX3RNf8pZ9E3Q bETe+r3dsSyMAgyMciKKbJ82cZzdH/FIUUvQ9vTMHNYmUCGMHBxCsBE+BMZFhxfxJJ9avlGz+S3 fBW7r3pPEV9v18CwYCLvq+eLfXV0yx9PfnfOtn/R81XF7wA= X-Developer-Key: i=gregkh@linuxfoundation.org; a=openpgp; fpr=F4B60CC5BF78C2214A313DCB3147D40DDB2DFB29 Content-Transfer-Encoding: 8bit Description =========== In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Fix class @block_class's subsystem refcount leakage blkcg_fill_root_iostats() iterates over @block_class's devices by class_dev_iter_(init|next)(), but does not end iterating with class_dev_iter_exit(), so causes the class's subsystem refcount leakage. Fix by ending the iterating with class_dev_iter_exit(). The Linux kernel CVE team has assigned CVE-2025-21745 to this issue. Affected and fixed versions =========================== Issue introduced in 5.9 with commit ef45fe470e1e5410db4af87abc5d5055427945ac and fixed in 6.1.129 with commit 431b6ef2714be4d5babb802114987541a88b43b0 Issue introduced in 5.9 with commit ef45fe470e1e5410db4af87abc5d5055427945ac and fixed in 6.6.78 with commit 993121481b5a87829f1e8163f47158b72679f309 Issue introduced in 5.9 with commit ef45fe470e1e5410db4af87abc5d5055427945ac and fixed in 6.12.14 with commit 2ce09aabe009453d641a2ceb79e6461a2d4f3876 Issue introduced in 5.9 with commit ef45fe470e1e5410db4af87abc5d5055427945ac and fixed in 6.13.3 with commit 67c7f213e052b1aa6caba4a7e25e303bc6997126 Issue introduced in 5.9 with commit ef45fe470e1e5410db4af87abc5d5055427945ac and fixed in 6.14-rc1 with commit d1248436cbef1f924c04255367ff4845ccd9025e Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2025-21745 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: block/blk-cgroup.c Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/431b6ef2714be4d5babb802114987541a88b43b0 https://git.kernel.org/stable/c/993121481b5a87829f1e8163f47158b72679f309 https://git.kernel.org/stable/c/2ce09aabe009453d641a2ceb79e6461a2d4f3876 https://git.kernel.org/stable/c/67c7f213e052b1aa6caba4a7e25e303bc6997126 https://git.kernel.org/stable/c/d1248436cbef1f924c04255367ff4845ccd9025e