In the Linux kernel, the following vulnerability has been resolved:
blk-cgroup: Fix class @block_class's subsystem refcount leakage
blkcgfillrootiostats() iterates over @blockclass's devices by classdeviter(init|next)(), but does not end iterating with classdeviterexit(), so causes the class's subsystem refcount leakage.
Fix by ending the iterating with classdeviter_exit().
[
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"150374544730893157966198332483015148434",
"271372060975300294991278191509340661872",
"220994075567132630314398814164316085579",
"26678421952275503532944808956402480258"
],
"threshold": 0.9
},
"target": {
"file": "block/blk-cgroup.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d1248436cbef1f924c04255367ff4845ccd9025e",
"signature_version": "v1",
"id": "CVE-2025-21745-061ec241"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 985.0,
"function_hash": "178556100569650301989113093821846224395"
},
"target": {
"file": "block/blk-cgroup.c",
"function": "blkcg_fill_root_iostats"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ffb494f1e7a047bd7a41b13796fcfb08fe5beafb",
"signature_version": "v1",
"id": "CVE-2025-21745-0776df93"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 974.0,
"function_hash": "290634612694111261611386526427807028188"
},
"target": {
"file": "block/blk-cgroup.c",
"function": "blkcg_fill_root_iostats"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@38287f779b34dfe959b4b681e909f2d3d52b88be",
"signature_version": "v1",
"id": "CVE-2025-21745-162e99ae"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"196090227150600240584112350628049811776",
"66389944236084139609957333060508983305",
"310065730724871867522942861588982826593",
"322461071749828769216244108461773110725"
],
"threshold": 0.9
},
"target": {
"file": "block/blk-cgroup.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ffb494f1e7a047bd7a41b13796fcfb08fe5beafb",
"signature_version": "v1",
"id": "CVE-2025-21745-4b34335e"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 974.0,
"function_hash": "305763883784513312325255147188566688384"
},
"target": {
"file": "block/blk-cgroup.c",
"function": "blkcg_fill_root_iostats"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@67c7f213e052b1aa6caba4a7e25e303bc6997126",
"signature_version": "v1",
"id": "CVE-2025-21745-6b5c232f"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"150374544730893157966198332483015148434",
"271372060975300294991278191509340661872",
"220994075567132630314398814164316085579",
"26678421952275503532944808956402480258"
],
"threshold": 0.9
},
"target": {
"file": "block/blk-cgroup.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@67c7f213e052b1aa6caba4a7e25e303bc6997126",
"signature_version": "v1",
"id": "CVE-2025-21745-6d1393ef"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"150374544730893157966198332483015148434",
"271372060975300294991278191509340661872",
"220994075567132630314398814164316085579",
"26678421952275503532944808956402480258"
],
"threshold": 0.9
},
"target": {
"file": "block/blk-cgroup.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@38287f779b34dfe959b4b681e909f2d3d52b88be",
"signature_version": "v1",
"id": "CVE-2025-21745-883e7fb7"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"150374544730893157966198332483015148434",
"271372060975300294991278191509340661872",
"220994075567132630314398814164316085579",
"26678421952275503532944808956402480258"
],
"threshold": 0.9
},
"target": {
"file": "block/blk-cgroup.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@993121481b5a87829f1e8163f47158b72679f309",
"signature_version": "v1",
"id": "CVE-2025-21745-8aa4c6f4"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 974.0,
"function_hash": "305763883784513312325255147188566688384"
},
"target": {
"file": "block/blk-cgroup.c",
"function": "blkcg_fill_root_iostats"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d1248436cbef1f924c04255367ff4845ccd9025e",
"signature_version": "v1",
"id": "CVE-2025-21745-a8634f7b"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"150374544730893157966198332483015148434",
"271372060975300294991278191509340661872",
"220994075567132630314398814164316085579",
"26678421952275503532944808956402480258"
],
"threshold": 0.9
},
"target": {
"file": "block/blk-cgroup.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2ce09aabe009453d641a2ceb79e6461a2d4f3876",
"signature_version": "v1",
"id": "CVE-2025-21745-c6ff3721"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 974.0,
"function_hash": "305763883784513312325255147188566688384"
},
"target": {
"file": "block/blk-cgroup.c",
"function": "blkcg_fill_root_iostats"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@993121481b5a87829f1e8163f47158b72679f309",
"signature_version": "v1",
"id": "CVE-2025-21745-d1c9e328"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 974.0,
"function_hash": "305763883784513312325255147188566688384"
},
"target": {
"file": "block/blk-cgroup.c",
"function": "blkcg_fill_root_iostats"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2ce09aabe009453d641a2ceb79e6461a2d4f3876",
"signature_version": "v1",
"id": "CVE-2025-21745-fb5baf5c"
}
]