{"id":"CVE-2025-21817","state":"PUBLISHED","title":"block: mark GFP_NOIO around sysfs ->store()","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nblock: mark GFP_NOIO around sysfs ->store()\n\nsysfs ->store is called with queue freezed, meantime we have several\n->store() callbacks(update_nr_requests, wbt, scheduler) to allocate\nmemory with GFP_KERNEL which may run into direct reclaim code path,\nthen potential deadlock can be caused.\n\nFix the issue by marking NOIO around sysfs ->store()","publishedAt":"2025-02-27T20:04:15.988Z","updatedAt":"2026-09-07T15:44:41.250Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"1645cd7fd42c236c952e9228badcac4fea1829ea","status":"affected","lessThan":"a09280c39ea54080daf19cfaf4a3121a8d17d5cd","versionType":"git"},{"version":"8985da5481562e96b95e94ed8e5cc9b6565eb82b","status":"affected","lessThan":"2566ce907e5d5db8a039647208e029ce559baa31","versionType":"git"},{"version":"c99f66e4084a62a2cc401c4704a84328aeddc9ec","status":"affected","lessThan":"7c0be4ead1f8f5f8be0803f347de0de81e3b8e1c","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["block/blk-sysfs.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"6.12.96","status":"affected","lessThan":"6.12.109","versionType":"semver"},{"version":"6.13.2","status":"affected","lessThan":"6.13.3","versionType":"semver"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["block/blk-sysfs.c"]}],"references":["https://git.kernel.org/stable/c/a09280c39ea54080daf19cfaf4a3121a8d17d5cd","https://git.kernel.org/stable/c/2566ce907e5d5db8a039647208e029ce559baa31","https://git.kernel.org/stable/c/7c0be4ead1f8f5f8be0803f347de0de81e3b8e1c"],"weaknesses":[],"ingestedAt":"2026-10-29T20:08:39.238Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/21xxx/CVE-2025-21817.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-21817","state":"PUBLISHED","datePublished":"2025-02-27T20:04:15.988Z","dateUpdated":"2026-09-07T15:44:41.250Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2024-12-29T08:45:45.774Z"},"containers":{"cna":{"title":"block: mark GFP_NOIO around sysfs ->store()","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nblock: mark GFP_NOIO around sysfs ->store()\n\nsysfs ->store is called with queue freezed, meantime we have several\n->store() callbacks(update_nr_requests, wbt, scheduler) to allocate\nmemory with GFP_KERNEL which may run into direct reclaim code path,\nthen potential deadlock can be caused.\n\nFix the issue by marking NOIO around sysfs ->store()"}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"1645cd7fd42c236c952e9228badcac4fea1829ea","status":"affected","lessThan":"a09280c39ea54080daf19cfaf4a3121a8d17d5cd","versionType":"git"},{"version":"8985da5481562e96b95e94ed8e5cc9b6565eb82b","status":"affected","lessThan":"2566ce907e5d5db8a039647208e029ce559baa31","versionType":"git"},{"version":"c99f66e4084a62a2cc401c4704a84328aeddc9ec","status":"affected","lessThan":"7c0be4ead1f8f5f8be0803f347de0de81e3b8e1c","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["block/blk-sysfs.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"6.12.96","status":"affected","lessThan":"6.12.109","versionType":"semver"},{"version":"6.13.2","status":"affected","lessThan":"6.13.3","versionType":"semver"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["block/blk-sysfs.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/a09280c39ea54080daf19cfaf4a3121a8d17d5cd"},{"url":"https://git.kernel.org/stable/c/2566ce907e5d5db8a039647208e029ce559baa31"},{"url":"https://git.kernel.org/stable/c/7c0be4ead1f8f5f8be0803f347de0de81e3b8e1c"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-09-07T15:44:41.250Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.12.96","versionEndExcluding":"6.12.109"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.13.2","versionEndExcluding":"6.13.3"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}