Security tracker / CVE-2025-37928

CVE-2025-37928

dm-bufio: don't schedule in atomic context

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in 7cd326747f46 ("dm bufio: remove dm_bufio_cond_resched()").
 carnil> Vulnerable versions: 4.9.

Bugs

Status

Branch	Status
upstream	released (6.15-rc5) [a3d8f0a7f5e8b193db509c7191fefeed3533fc44]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.14-upstream-stable	released (6.14.6) [69a37b3ba85088fc6b903b8e1db7f0a1d4d0b52d]
6.12-upstream-stable	released (6.12.28) [f45108257280e0a1cc951ce254853721b40c0812]
6.6-upstream-stable	released (6.6.90) [c8c83052283bcf2fdd467a33d1d2bd5ba36e935a]
6.1-upstream-stable	released (6.1.138) [a99f5bf4f7197009859dbce14c12f8e2ce5a5a69]
5.10-upstream-stable	needed
sid	released (6.12.29-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	released (6.1.139-1)
5.10-bullseye-security	needed