In the Linux kernel, the following vulnerability has been resolved:
blk-cgroup: Fix class @block_class's subsystem refcount leakage
blkcgfillrootiostats() iterates over @blockclass's devices by classdeviter(init|next)(), but does not end iterating with classdeviterexit(), so causes the class's subsystem refcount leakage.
Fix by ending the iterating with classdeviter_exit().
[
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"150374544730893157966198332483015148434",
"271372060975300294991278191509340661872",
"220994075567132630314398814164316085579",
"26678421952275503532944808956402480258"
],
"threshold": 0.9
},
"id": "CVE-2025-21745-061ec241",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d1248436cbef1f924c04255367ff4845ccd9025e",
"signature_version": "v1",
"target": {
"file": "block/blk-cgroup.c"
}
},
{
"signature_type": "Function",
"digest": {
"function_hash": "178556100569650301989113093821846224395",
"length": 985.0
},
"id": "CVE-2025-21745-0776df93",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ffb494f1e7a047bd7a41b13796fcfb08fe5beafb",
"signature_version": "v1",
"target": {
"file": "block/blk-cgroup.c",
"function": "blkcg_fill_root_iostats"
}
},
{
"signature_type": "Function",
"digest": {
"function_hash": "290634612694111261611386526427807028188",
"length": 974.0
},
"id": "CVE-2025-21745-162e99ae",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@38287f779b34dfe959b4b681e909f2d3d52b88be",
"signature_version": "v1",
"target": {
"file": "block/blk-cgroup.c",
"function": "blkcg_fill_root_iostats"
}
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"196090227150600240584112350628049811776",
"66389944236084139609957333060508983305",
"310065730724871867522942861588982826593",
"322461071749828769216244108461773110725"
],
"threshold": 0.9
},
"id": "CVE-2025-21745-4b34335e",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ffb494f1e7a047bd7a41b13796fcfb08fe5beafb",
"signature_version": "v1",
"target": {
"file": "block/blk-cgroup.c"
}
},
{
"signature_type": "Function",
"digest": {
"function_hash": "305763883784513312325255147188566688384",
"length": 974.0
},
"id": "CVE-2025-21745-6b5c232f",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@67c7f213e052b1aa6caba4a7e25e303bc6997126",
"signature_version": "v1",
"target": {
"file": "block/blk-cgroup.c",
"function": "blkcg_fill_root_iostats"
}
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"150374544730893157966198332483015148434",
"271372060975300294991278191509340661872",
"220994075567132630314398814164316085579",
"26678421952275503532944808956402480258"
],
"threshold": 0.9
},
"id": "CVE-2025-21745-6d1393ef",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@67c7f213e052b1aa6caba4a7e25e303bc6997126",
"signature_version": "v1",
"target": {
"file": "block/blk-cgroup.c"
}
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"150374544730893157966198332483015148434",
"271372060975300294991278191509340661872",
"220994075567132630314398814164316085579",
"26678421952275503532944808956402480258"
],
"threshold": 0.9
},
"id": "CVE-2025-21745-883e7fb7",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@38287f779b34dfe959b4b681e909f2d3d52b88be",
"signature_version": "v1",
"target": {
"file": "block/blk-cgroup.c"
}
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"150374544730893157966198332483015148434",
"271372060975300294991278191509340661872",
"220994075567132630314398814164316085579",
"26678421952275503532944808956402480258"
],
"threshold": 0.9
},
"id": "CVE-2025-21745-8aa4c6f4",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@993121481b5a87829f1e8163f47158b72679f309",
"signature_version": "v1",
"target": {
"file": "block/blk-cgroup.c"
}
},
{
"signature_type": "Function",
"digest": {
"function_hash": "305763883784513312325255147188566688384",
"length": 974.0
},
"id": "CVE-2025-21745-a8634f7b",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d1248436cbef1f924c04255367ff4845ccd9025e",
"signature_version": "v1",
"target": {
"file": "block/blk-cgroup.c",
"function": "blkcg_fill_root_iostats"
}
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"150374544730893157966198332483015148434",
"271372060975300294991278191509340661872",
"220994075567132630314398814164316085579",
"26678421952275503532944808956402480258"
],
"threshold": 0.9
},
"id": "CVE-2025-21745-c6ff3721",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2ce09aabe009453d641a2ceb79e6461a2d4f3876",
"signature_version": "v1",
"target": {
"file": "block/blk-cgroup.c"
}
},
{
"signature_type": "Function",
"digest": {
"function_hash": "305763883784513312325255147188566688384",
"length": 974.0
},
"id": "CVE-2025-21745-d1c9e328",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@993121481b5a87829f1e8163f47158b72679f309",
"signature_version": "v1",
"target": {
"file": "block/blk-cgroup.c",
"function": "blkcg_fill_root_iostats"
}
},
{
"signature_type": "Function",
"digest": {
"function_hash": "305763883784513312325255147188566688384",
"length": 974.0
},
"id": "CVE-2025-21745-fb5baf5c",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2ce09aabe009453d641a2ceb79e6461a2d4f3876",
"signature_version": "v1",
"target": {
"file": "block/blk-cgroup.c",
"function": "blkcg_fill_root_iostats"
}
}
]