CVE-2025-40325: md/raid10: wait barrier before returning discard request with REQ_NOWAIT

Published Apr 18, 2025
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

md/raid10: wait barrier before returning discard request with REQNOWAIT

raid10handlediscard should wait barrier before returning a discard bio which has REQNOWAIT. And there is no need to print warning calltrace if a discard bio has REQNOWAIT flag. Quality engineer usually checks dmesg and reports error if dmesg has warning/error calltrace.

Affected Software

7 affected components
Linux Linux kernel
Microsoft cbl2 kernel 5.15.186.1-1
Microsoft azl3 kernel 6.6.117.1-1
Microsoft azl3 kernel 6.6.112.1-2
Linux Linux kernel>=5.15.111<5.16
Linux Linux kernel>=5.17<6.14.2
Microsoft azl3 kernel 6.6.119.3-1

Event History

Apr 18, 2025
CVE Published
via MITRE·07:01 AM
Data Sourced
via MITRE·07:01 AM
Description
Data Sourced
via NVD·07:15 AM
RemedyDescriptionSeverityAffected Software
Sep 4, 2025
Data Sourced
via Microsoft·02:00 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·02:00 AM
Affected Software
Updated
via Microsoft·02:00 AM
SeverityAffected Software
Updated
via Microsoft·09:00 AM
DescriptionSeverity

Frequently Asked Questions

1

What is the severity of CVE-2025-40325?

CVE-2025-40325 has a medium severity level due to potential data corruption issues in the Linux kernel's RAID management.

2

How do I fix CVE-2025-40325?

To fix CVE-2025-40325, upgrade to the latest version of the Linux kernel where the vulnerability has been patched.

3

What systems are affected by CVE-2025-40325?

CVE-2025-40325 affects the Linux kernel, specifically systems using RAID 10 configurations.

4

What is the nature of the vulnerability in CVE-2025-40325?

The vulnerability in CVE-2025-40325 involves improper handling of discard requests with REQ_NOWAIT in RAID 10 operations.

5

Is there a workaround for CVE-2025-40325?

There are currently no known workarounds for CVE-2025-40325, and applying the patch is recommended.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203