CVE-2025-21745: blk-cgroup: Fix class @block_class's subsystem refcount leakage
Published Feb 27, 2025
·Updated
blk-cgroup: Fix class @blockclass's subsystem refcount leakage
Affected Software
13 affected componentsFixes available
Microsoft cbl2 kernel 5.15.182.1-1
Microsoft cbl2 kernel 5.15.182.1-1
Microsoft azl3 kernel 6.6.64.2-9
Microsoft azl3 kernel 6.6.78.1-3
Microsoft cbl2 kernel 5.15.179.1-1
Linux Linux kernel>=5.9<6.1.129
Linux Linux kernel>=6.2<6.6.78
Linux Linux kernel>=6.7<6.12.14
Linux Linux kernel>=6.13<6.13.3
IBM Verify Identity Access<=11.0 - 11.0.2
IBM Security Verify Access<=10.0 - 10.0.9.1
IBM Verify Identity Access Container<=11.0 - 11.0.2
IBM Security Verify Access Container<=10.0 - 10.0.9.1
Event History
Feb 27, 2025
CVE Published
via MITRE·02:12 AM
Data Sourced
via MITRE·02:12 AM
Description
Data Sourced
via Red Hat·03:06 AM
DescriptionSeverityAffected Software
Data Sourced
via NVD·03:15 AM
RemedyDescriptionSeverityAffected Software
Mar 14, 2025
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·07:00 AM
Affected Software
Updated
via Microsoft·07:00 AM
Affected Software
Updated
via Microsoft·07:00 AM
SeverityAffected Software
Updated
via Microsoft·07:00 AM
Description
Jul 8, 2026
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-21745?
The severity of CVE-2025-21745 has not been explicitly rated but is related to a refcount leakage in the Linux kernel.
2
How do I fix CVE-2025-21745?
To fix CVE-2025-21745, you should update the Linux kernel to a patched version that addresses this vulnerability.
3
Which versions of the Linux kernel are affected by CVE-2025-21745?
CVE-2025-21745 affects Linux kernel versions from 5.9 to 6.1.129, 6.2 to 6.6.78, 6.7 to 6.12.14, and 6.13 to 6.13.3.
4
What are the potential impacts of CVE-2025-21745?
CVE-2025-21745 can lead to resource management issues due to the refcount leakage in block cgroup handling.
5
Is there a public exploit for CVE-2025-21745?
As of now, there is no known public exploit for CVE-2025-21745.