Security tracker / CVE-2025-21712

CVE-2025-21712

md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in 32a7627cf3a3 ("[PATCH] md: optimised resync using Bitmap based
 carnil> intent logging"). Vulnerable versions: 2.6.13-rc4.

Bugs

Status

Branch	Status
upstream	released (6.14-rc1) [8d28d0ddb986f56920ac97ae704cc3340a699a30]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.13-upstream-stable	released (6.13.2) [4e9316eee3885bfb311b4759513f2ccf37891c09]
6.12-upstream-stable	released (6.12.13) [237e19519c8ff6949f0ef57c4a0243f5b2b0fa18]
6.6-upstream-stable	released (6.6.80) [52848a095b55a302af92f52ca0de5b3112059bb8]
6.1-upstream-stable	released (6.1.130) [032fa54f486eac5507976e7e31f079a767bc13a8]
5.10-upstream-stable	needed
sid	released (6.12.13-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	released (6.1.133-1)
5.10-bullseye-security	needed