PT-2025-37326 · Linux+5 · Linux Kernel+5

Published 2025-06-25 · Updated 2026-04-08 · CVE-2025-39792

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The Linux kernel contains a flaw related to block I/O (BIO) splitting in device mapper (dm) targets that support zoned devices. Specifically, the issue arises when zoned DM targets utilize zone append emulation and employ dm accept partial bio(). Incorrect BIO splitting can lead to deadlocks during queue freeze operations and invalid writen sector values. The dm zone bio needs split() function has been modified to utilize bio split to limits() to ensure BIOs are split before being passed to the target's map function, preventing the exceeding of device limits. This affects dm-crypt and dm-flakey target drivers.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-833

Related Identifiers

BDU:2025-14985

CVE-2025-39792

OPENSUSE-SU-2025:20081-1

SUSE-SU-2025:21074-1

SUSE-SU-2025:21139-1

SUSE-SU-2025:21179-1

Affected Products

Astra Linux

Linux Kernel

Red Os

Suse

Dm-Crypt

Dm-Flakey

References · 1274

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39792.json · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2025:20081-1 · Vendor Advisory
• https://git.kernel.org/stable/c/4e9fef1cf0243d665d75c371cc80be6156cd30a2 · Patch
• https://git.kernel.org/stable/c/d10bf66d9f9335ffc7521b3029b114f50604cabe · Patch
• https://bdu.fstec.ru/vul/2025-14985 · Security Note
• https://git.kernel.org/stable/c/f5dd256333c08ab44b5aec4a8118cb04c0f20c54 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-39792 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2025-39792 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:21139-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-20662.html · Vendor Advisory
• https://git.kernel.org/stable/c/2df7168717b7d2d32bcf017c68be16e4aae9dd13 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-39792 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-39792 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39792 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:21074-1 · Vendor Advisory