- Vulnerability/
- CVE-2025-22124
CVE-2025-22124: md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb
First published: Wed Apr 16 2025(Updated: )
In the Linux kernel, the following vulnerability has been resolved: md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb In clustermd, separate write-intent-bitmaps are used for each cluster node: 0 4k 8k 12k ------------------------------------------------------------------- | idle | md super | bm super [0] + bits | | bm bits[0, contd] | bm super[1] + bits | bm bits[1, contd] | | bm super[2] + bits | bm bits [2, contd] | bm super[3] + bits | | bm bits [3, contd] | | | So in node 1, pg_index in __write_sb_page() could equal to bitmap->storage.file_pages. Then bitmap_limit will be calculated to 0. md_super_write() will be called with 0 size. That means the first 4k sb area of node 1 will never be updated through filemap_write_page(). This bug causes hang of mdadm/clustermd_tests/01r1_Grow_resize. Here use (pg_index % bitmap->storage.file_pages) to make calculation of bitmap_limit correct.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Kernel |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-22124?
CVE-2025-22124 is considered a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2025-22124?
To fix CVE-2025-22124, you should update to the latest version of the Linux kernel that includes the vulnerability resolution.
What type of vulnerability is CVE-2025-22124?
CVE-2025-22124 is a vulnerability related to incorrect handling of bitmap limits in the clustermd functionality of the Linux kernel.
Which versions of the Linux kernel are affected by CVE-2025-22124?
CVE-2025-22124 affects certain versions of the Linux kernel prior to the fix implemented in the patch.
What impact does CVE-2025-22124 have on systems?
CVE-2025-22124 can potentially lead to data corruption and unstable behavior in systems using clustermd with incorrect bitmap handling.
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/title
- agent/description
- agent/first-publish-date
- agent/type
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/source
- agent/author
- agent/last-modified-date
- agent/tags
- agent/event
- vendor/linux foundation
- canonical/linux kernel