CVE-2025-21664: dm thin: make get_first_thin use rcu-safe list first function
Published Jan 21, 2025
·Updated
In the Linux kernel, the following vulnerability has been resolved:
Affected Software
20 affected componentsFixes available
Linux Linux kernel
Linux Linux kernel>=3.15.1<5.4.290
Linux Linux kernel>=5.5<5.10.234
Linux Linux kernel>=5.11<5.15.177
Linux Linux kernel>=5.16<6.1.125
Linux Linux kernel>=6.2<6.6.72
Linux Linux kernel>=6.7<6.12.10
Linux Linux kernel=3.15
Linux Linux kernel=3.15-rc4
Linux Linux kernel=3.15-rc5
Linux Linux kernel=3.15-rc6
Linux Linux kernel=3.15-rc7
Linux Linux kernel=3.15-rc8
Linux Linux kernel=6.13-rc1
Linux Linux kernel=6.13-rc2
Linux Linux kernel=6.13-rc3
Linux Linux kernel=6.13-rc4
Linux Linux kernel=6.13-rc5
Linux Linux kernel=6.13-rc6
debian/linux
6.1.176-16.1.190-16.12.107-16.12.115-27.2.12-17.2.15-1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.187-1Fixed in 6.12.107-1Fixed in 6.12.111-1Fixed in 7.2.9-1Fixed in 7.2.10-1
Event History
Jan 21, 2025
CVE Published
via MITRE·12:18 PM
Data Sourced
via MITRE·12:18 PM
DescriptionSeverity
Data Sourced
via NVD·01:15 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-21664?
CVE-2025-21664 is classified as a moderate severity vulnerability in the Linux kernel.
2
How do I fix CVE-2025-21664?
To fix CVE-2025-21664, update the Linux kernel to the latest version that contains the security patch.
3
What components of the Linux kernel are affected by CVE-2025-21664?
CVE-2025-21664 affects the dm thin component of the Linux kernel.
4
Is CVE-2025-21664 being exploited in the wild?
As of now, there have been no confirmed reports of CVE-2025-21664 being actively exploited in the wild.
5
Where can I find more information about CVE-2025-21664?
Detailed technical information about CVE-2025-21664 can be found in the Linux kernel's commit history.