CVE-2025-21745
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Feb 27, 2025
Updated: Mar 13, 2025
Summary
CVE-2025-21745 is a vulnerability affecting the Linux kernel's blk-cgroup subsystem. The issue arises from the function blkcg_fill_root_iostats, which iterates over devices in the @block_class by using class_dev_iter_(init|next)(), but fails to terminate the iteration with class_dev_iter_exit(). Consequently, the class's subsystem refcount experiences leakage. This vulnerability has been addressed by ensuring that the iteration is properly terminated with class_dev_iter_exit().
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.