PT-2025-51591 · Linux+3 · Linux Kernel+3
Published
2025-09-23
·
Updated
2026-05-26
·
CVE-2025-68178
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.17.0-rc3
Description
A deadlock situation can occur during policy configuration within the block layer (blk-cgroup). This deadlock is triggered by a circular locking dependency, specifically involving locks related to queue usage and resource quotas. The root cause is that the
queue usage counter is acquired while the rq qos mutex is held, leading to a potential race condition when the queue needs to be frozen from another context. The issue arises because blk queue enter() is used for policy deactivation protection, which is already handled by blkcg mutex. The recommended fix involves replacing blk queue enter() with blkcg mutex and modifying blkg alloc() to use GFP NOIO.Recommendations
Update to a version newer than 6.17.0-rc3.
Exploit
Fix
Improper Resource Release
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Ubuntu