CVE-2025-37978
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
36/100
Published: 2025-05-20
Modified: 2026-11-05
First seen: 2026-11-05
Status: active
Attack Surface
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: block: integrity: Do not call set_page_dirty_lock() Placing multiple protection information buffers inside the same page can lead to oopses because set_page_dirty_lock() can't be called from interrupt context. Since a protection information buffer is not backed by a file there is no point in setting its page dirty, there is nothing to synchronize. Drop the call to set_page_dirty_lock() and remove the last argument to bio_integrity_unpin_bvec().
Affected Software (7)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | 492c5d455969fc2e829f26ed4c83487b068f0dd7 < c38a005e6efb9ddfa06bd8353b82379d6fd5d6c4 |
| Linux | Linux | 492c5d455969fc2e829f26ed4c83487b068f0dd7 < 9487fc1a10b3aa89feb24e7cedeccaaf63074617 |
| Linux | Linux | 492c5d455969fc2e829f26ed4c83487b068f0dd7 < 39e160505198ff8c158f11bce2ba19809a756e8b |
| Linux | Linux | 6.8 |
| linux | linux_kernel | 6.8 – 6.12.25 |
| linux | linux_kernel | 6.15 |
| linux | linux_kernel | 6.15 |