CVE-2025-38141

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

dm: fix dm_blk_report_zones

If dm_get_live_table() returned NULL, dm_put_live_table() was never

called. Also, it is possible that md->zone_revalidate_map will change

while calling this function. Only read it once, so that we are always

using the same value. Otherwise we might miss a call to

dm_put_live_table().

Finally, while md->zone_revalidate_map is set and a process is calling

blk_revalidate_disk_zones() to set up the zone append emulation

resources, it is possible that another process, perhaps triggered by

blkdev_report_zones_ioctl(), will call dm_blk_report_zones(). If

blk_revalidate_disk_zones() fails, these resources can be freed while

the other process is still using them, causing a use-after-free error.

blk_revalidate_disk_zones() will only ever be called when initially

setting up the zone append emulation resources, such as when setting up

a zoned dm-crypt table for the first time. Further table swaps wi

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References