CVE-2025-38326

Summary

In the Linux kernel, the following vulnerability has been resolved:

aoe: clean device rq_list in aoedev_downdev()

An aoe device's rq_list contains accepted block requests that are waiting to be transmitted to the aoe target. This queue was added as part of the conversion to blk_mq. However, the queue was not cleaned out when an aoe device is downed which caused blk_mq_freeze_queue() to sleep indefinitely waiting for those requests to complete, causing a hang. This fix cleans out the queue before calling blk_mq_freeze_queue().

Affected Software

VendorProductVersion RangeStatus
LinuxLinux3582dd291788e9441c3ba9047e55089edb98da5c < ed52e9652ba41d362e9ec923077f6da23336f269affected
LinuxLinux3582dd291788e9441c3ba9047e55089edb98da5c < 64fc0bad62ed38874131dd0337d844a43bd1017eaffected
LinuxLinux3582dd291788e9441c3ba9047e55089edb98da5c < ef0b5bbbed7f220db2e9c73428f9a36e8dfc69caaffected
LinuxLinux3582dd291788e9441c3ba9047e55089edb98da5c < 531aef4a1accb13b21a3b82ec29955f4733367d5affected
LinuxLinux3582dd291788e9441c3ba9047e55089edb98da5c < 8662ac79a63488e279b91c12a72b02bc0dc49f7baffected
LinuxLinux3582dd291788e9441c3ba9047e55089edb98da5c < fa2a79f0da92614c5dc45c8b3d2638681c7734eeaffected
LinuxLinux3582dd291788e9441c3ba9047e55089edb98da5c < 00be74e1470af292c37a438b8e69dee47dcbf481affected
LinuxLinux3582dd291788e9441c3ba9047e55089edb98da5c < 7f90d45e57cb2ef1f0adcaf925ddffdfc5e680caaffected
LinuxLinux4.20affected
LinuxLinux0 < 4.20unaffected
LinuxLinux5.4.295 <= 5.4.*unaffected
LinuxLinux5.10.239 <= 5.10.*unaffected
LinuxLinux5.15.186 <= 5.15.*unaffected
LinuxLinux6.1.142 <= 6.1.*unaffected
LinuxLinux6.6.95 <= 6.6.*unaffected
LinuxLinux6.12.35 <= 6.12.*unaffected
LinuxLinux6.15.4 <= 6.15.*unaffected
LinuxLinux6.16 <= *unaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

References