In the Linux kernel, the following vulnerability has been resolved:
aoe: clean device rqlist in aoedevdowndev()
An aoe device's rqlist contains accepted block requests that are waiting to be transmitted to the aoe target. This queue was added as part of the conversion to blkmq. However, the queue was not cleaned out when an aoe device is downed which caused blkmqfreezequeue() to sleep indefinitely waiting for those requests to complete, causing a hang. This fix cleans out the queue before calling blkmqfreezequeue().
[
{
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"157176056133910550456676274296573861239",
"64835530916878900600309534388778372853",
"97907619869454515489887405112741726135",
"108180270420610089531631862682283869852",
"84967339639213444702028040970130906505",
"71557832621410818681267689688306678520",
"338060910085135211577624364841384391875"
]
},
"deprecated": false,
"id": "CVE-2025-38326-36e6d44f",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ef0b5bbbed7f220db2e9c73428f9a36e8dfc69ca",
"target": {
"file": "drivers/block/aoe/aoedev.c"
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"157176056133910550456676274296573861239",
"64835530916878900600309534388778372853",
"97907619869454515489887405112741726135",
"108180270420610089531631862682283869852",
"84967339639213444702028040970130906505",
"71557832621410818681267689688306678520",
"338060910085135211577624364841384391875"
]
},
"deprecated": false,
"id": "CVE-2025-38326-4640f906",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8662ac79a63488e279b91c12a72b02bc0dc49f7b",
"target": {
"file": "drivers/block/aoe/aoedev.c"
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"digest": {
"function_hash": "320042994287026436254558353893000866782",
"length": 724.0
},
"deprecated": false,
"id": "CVE-2025-38326-4d6293fb",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed52e9652ba41d362e9ec923077f6da23336f269",
"target": {
"function": "aoedev_downdev",
"file": "drivers/block/aoe/aoedev.c"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"digest": {
"function_hash": "320042994287026436254558353893000866782",
"length": 724.0
},
"deprecated": false,
"id": "CVE-2025-38326-4f89afb8",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ef0b5bbbed7f220db2e9c73428f9a36e8dfc69ca",
"target": {
"function": "aoedev_downdev",
"file": "drivers/block/aoe/aoedev.c"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"digest": {
"function_hash": "320042994287026436254558353893000866782",
"length": 724.0
},
"deprecated": false,
"id": "CVE-2025-38326-54bb7100",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@531aef4a1accb13b21a3b82ec29955f4733367d5",
"target": {
"function": "aoedev_downdev",
"file": "drivers/block/aoe/aoedev.c"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"157176056133910550456676274296573861239",
"64835530916878900600309534388778372853",
"97907619869454515489887405112741726135",
"108180270420610089531631862682283869852",
"84967339639213444702028040970130906505",
"71557832621410818681267689688306678520",
"338060910085135211577624364841384391875"
]
},
"deprecated": false,
"id": "CVE-2025-38326-62fae2f3",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@64fc0bad62ed38874131dd0337d844a43bd1017e",
"target": {
"file": "drivers/block/aoe/aoedev.c"
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"157176056133910550456676274296573861239",
"64835530916878900600309534388778372853",
"97907619869454515489887405112741726135",
"108180270420610089531631862682283869852",
"84967339639213444702028040970130906505",
"71557832621410818681267689688306678520",
"338060910085135211577624364841384391875"
]
},
"deprecated": false,
"id": "CVE-2025-38326-67e8453a",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fa2a79f0da92614c5dc45c8b3d2638681c7734ee",
"target": {
"file": "drivers/block/aoe/aoedev.c"
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"digest": {
"function_hash": "332682993161221048651186260606912773426",
"length": 751.0
},
"deprecated": false,
"id": "CVE-2025-38326-6bfdf6a0",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@00be74e1470af292c37a438b8e69dee47dcbf481",
"target": {
"function": "aoedev_downdev",
"file": "drivers/block/aoe/aoedev.c"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"157176056133910550456676274296573861239",
"64835530916878900600309534388778372853",
"97907619869454515489887405112741726135",
"108180270420610089531631862682283869852",
"84967339639213444702028040970130906505",
"88441689940432479130055063537454030009",
"102434674380273001478701908792806724579"
]
},
"deprecated": false,
"id": "CVE-2025-38326-b89193f5",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@00be74e1470af292c37a438b8e69dee47dcbf481",
"target": {
"file": "drivers/block/aoe/aoedev.c"
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"digest": {
"function_hash": "320042994287026436254558353893000866782",
"length": 724.0
},
"deprecated": false,
"id": "CVE-2025-38326-c5ca82ed",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fa2a79f0da92614c5dc45c8b3d2638681c7734ee",
"target": {
"function": "aoedev_downdev",
"file": "drivers/block/aoe/aoedev.c"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"digest": {
"function_hash": "332682993161221048651186260606912773426",
"length": 751.0
},
"deprecated": false,
"id": "CVE-2025-38326-cfa8ae6c",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7f90d45e57cb2ef1f0adcaf925ddffdfc5e680ca",
"target": {
"function": "aoedev_downdev",
"file": "drivers/block/aoe/aoedev.c"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"digest": {
"function_hash": "320042994287026436254558353893000866782",
"length": 724.0
},
"deprecated": false,
"id": "CVE-2025-38326-d5edbc26",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@64fc0bad62ed38874131dd0337d844a43bd1017e",
"target": {
"function": "aoedev_downdev",
"file": "drivers/block/aoe/aoedev.c"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"157176056133910550456676274296573861239",
"64835530916878900600309534388778372853",
"97907619869454515489887405112741726135",
"108180270420610089531631862682283869852",
"84967339639213444702028040970130906505",
"71557832621410818681267689688306678520",
"338060910085135211577624364841384391875"
]
},
"deprecated": false,
"id": "CVE-2025-38326-e6573f75",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@531aef4a1accb13b21a3b82ec29955f4733367d5",
"target": {
"file": "drivers/block/aoe/aoedev.c"
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"digest": {
"function_hash": "320042994287026436254558353893000866782",
"length": 724.0
},
"deprecated": false,
"id": "CVE-2025-38326-e73ea5a4",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8662ac79a63488e279b91c12a72b02bc0dc49f7b",
"target": {
"function": "aoedev_downdev",
"file": "drivers/block/aoe/aoedev.c"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"157176056133910550456676274296573861239",
"64835530916878900600309534388778372853",
"97907619869454515489887405112741726135",
"108180270420610089531631862682283869852",
"84967339639213444702028040970130906505",
"88441689940432479130055063537454030009",
"102434674380273001478701908792806724579"
]
},
"deprecated": false,
"id": "CVE-2025-38326-ec3ee869",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7f90d45e57cb2ef1f0adcaf925ddffdfc5e680ca",
"target": {
"file": "drivers/block/aoe/aoedev.c"
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"157176056133910550456676274296573861239",
"64835530916878900600309534388778372853",
"97907619869454515489887405112741726135",
"108180270420610089531631862682283869852",
"84967339639213444702028040970130906505",
"71557832621410818681267689688306678520",
"338060910085135211577624364841384391875"
]
},
"deprecated": false,
"id": "CVE-2025-38326-fb588b0e",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed52e9652ba41d362e9ec923077f6da23336f269",
"target": {
"file": "drivers/block/aoe/aoedev.c"
},
"signature_type": "Line"
}
]