CVE-2025-23138: watch_queue: fix pipe accounting mismatch
In the Linux kernel, the following vulnerability has been resolved:
watchqueue: fix pipe accounting mismatch
Currently, watchqueuesetsize() modifies the pipe buffers charged to user->pipebufs without updating the pipe->nraccounted on the pipe itself, due to the if (!pipehaswatchqueue()) test in piperesizering(). This means that when the pipe is ultimately freed, we decrement user->pipebufs by something other than what than we had charged to it, potentially leading to an underflow. This in turn can cause subsequent toomanypipebufferssoft() tests to fail with -EPERM.
To remedy this, explicitly account for the pipe usage in watchqueuesetsize() to match the number set via accountpipebuffers()
(It's unclear why watchqueuesetsize() does not update nraccounted; it may be due to intentional overprovisioning in watchqueuesetsize()?)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-23138?
CVE-2025-23138 is rated as a medium severity vulnerability affecting the Linux kernel.
How do I fix CVE-2025-23138?
To fix CVE-2025-23138, you should update your Linux kernel to the latest stable version provided by your distribution.
What are the impacts of CVE-2025-23138 on system performance?
CVE-2025-23138 can lead to incorrect resource accounting for pipe buffers, potentially affecting system performance under high loads.
Which versions of the Linux kernel are affected by CVE-2025-23138?
CVE-2025-23138 impacts various versions of the Linux kernel prior to the patches that address this specific vulnerability.
Is CVE-2025-23138 actively being exploited in the wild?
As of now, there is no indication that CVE-2025-23138 is being actively exploited in the wild, but it is advisable to apply patches promptly.