CVE-2025-21832: block: don't revert iter for -EIOCBQUEUED
In the Linux kernel, the following vulnerability has been resolved:
block: don't revert iter for -EIOCBQUEUED
blkdevreaditer() has a few odd checks, like gating the position and count adjustment on whether or not the result is bigger-than-or-equal to zero (where bigger than makes more sense), and not checking the return value of blkdevdirectIO() before doing an ioviterrevert(). The latter can lead to attempting to revert with a negative value, which when passed to ioviterrevert() as an unsigned value will lead to throwing a WARNON() because unroll is bigger than MAXRWCOUNT.
Be sane and don't revert for -EIOCBQUEUED, like what is done in other spots.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21832?
CVE-2025-21832 has been classified with a moderate severity level due to potential impacts on block device operations.
How do I fix CVE-2025-21832?
To fix CVE-2025-21832, you should update your Linux kernel to the latest stable version that addresses this vulnerability.
What systems are affected by CVE-2025-21832?
CVE-2025-21832 affects the Linux kernel across various distributions that utilize this component.
What are the potential consequences of CVE-2025-21832?
The consequences of CVE-2025-21832 may include disrupted block device operations leading to data loss or corruption.
When was CVE-2025-21832 published?
CVE-2025-21832 was published as part of a security advisory following the detection of the issue in the Linux kernel.