PT-2025-37248 · Linux+3 · Linux Kernel+3

Published 2025-06-25 · Updated 2026-04-08 · CVE-2025-39791

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions:

Linux kernel (affected versions not specified)

Description:

The Linux kernel contains a flaw within the dm-crypt module related to handling write operations on zoned storage devices. Specifically, the issue arises from the splitting of BIOs (block I/O operations) before they are fully processed by dm-crypt, leading to potential deadlocks and file system data corruption when using XFS or Btrfs. The vulnerability occurs because the splitting of write BIOs can cause incorrect sector information to be returned during zone append operations, and can also lead to deadlocks due to interactions with queue freeze operations. The issue does not affect read operations or regular dm-crypt block devices.

Recommendations:

At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Locking

Weakness Enumeration

CWE-667

CWE-833

Related Identifiers

BDU:2025-14996

CVE-2025-39791

DSA-6008-1

OPENSUSE-SU-2025:20081-1

SUSE-SU-2025:21074-1

SUSE-SU-2025:21139-1

SUSE-SU-2025:21179-1

Affected Products

Astra Linux

Linux Kernel

Red Os

Suse

References · 1275

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39791.json · Exploit
• https://cve.org/CVERecord?id=CVE-2025-39791 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:21139-1 · Vendor Advisory
• https://git.kernel.org/stable/c/8864616719b6bbf92356bc89ff544b0cd484c656 · Patch
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-1113SE18 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-39791 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:21179-1 · Vendor Advisory
• https://git.kernel.org/stable/c/e549663849e5bb3b985dc2d293069f0d9747ae72 · Patch
• https://osv.dev/vulnerability/CVE-2025-39791 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-39791 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-39791 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-14996 · Security Note
• https://git.kernel.org/stable/c/52a2c4c60470352acf9cde7a2dfa661c1e67e796 · Patch
• https://linux.oracle.com/errata/ELSA-2025-25754.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:20081-1 · Vendor Advisory