{"id":"CVE-2025-38302","title":"block: don't use submit_bio_noacct_nocheck in blk_zone_wplug_bio_work","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nblock: don't use submit_bio_noacct_nocheck in blk_zone_wplug_bio_work\n\nBios queued up in the zone write plug have already gone through all all\npreparation in the submit…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 9b1ce7f0c6f82e241196febabddba5fab66c8f05 < 0fccb6773b1f4f992e435582cf8e050de421b678","Linux >= 9b1ce7f0c6f82e241196febabddba5fab66c8f05 < 6ffae5d53f704d300cc73b06b4ea99e4507f7cf1","Linux >= 9b1ce7f0c6f82e241196febabddba5fab66c8f05 < cf625013d8741c01407bbb4a60c111b61b9fa69d","Linux 6.10"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T20:53:24.758441Z"},"published":"2025-07-10","updated":"2026-11-05","sourceUpdated":"2026-11-05T21:02:31.246Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-38302","references":[{"url":"https://git.kernel.org/stable/c/0fccb6773b1f4f992e435582cf8e050de421b678"},{"url":"https://git.kernel.org/stable/c/6ffae5d53f704d300cc73b06b4ea99e4507f7cf1"},{"url":"https://git.kernel.org/stable/c/cf625013d8741c01407bbb4a60c111b61b9fa69d"}],"tags":["cve.org"],"epss":0.00146,"epssPercentile":0.03887,"ingestedAt":"2026-11-05T22:38:31.948Z","slug":"CVE-2025-38302","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nblock: don't use submit_bio_noacct_nocheck in blk_zone_wplug_bio_work\n\nBios queued up in the zone write plug have already gone through all all\npreparation in the submit_bio path, including the freeze protection.\n\nSubmitting them through submit_bio_noacct_nocheck duplicates the work\nand can can cause deadlocks when freezing a queue with pending bio\nwrite plugs.\n\nGo straight to ->submit_bio or blk_mq_submit_bio to bypass the\nsuperfluous extra freeze protection and checks.\n\n## Affected\n\n- `Linux >= 9b1ce7f0c6f82e241196febabddba5fab66c8f05 < 0fccb6773b1f4f992e435582cf8e050de421b678`\n- `Linux >= 9b1ce7f0c6f82e241196febabddba5fab66c8f05 < 6ffae5d53f704d300cc73b06b4ea99e4507f7cf1`\n- `Linux >= 9b1ce7f0c6f82e241196febabddba5fab66c8f05 < cf625013d8741c01407bbb4a60c111b61b9fa69d`\n- `Linux 6.10`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}