CVE-2025-71225
Severity
5.3MEDIUM
EPSS
0.0%
top 97.63%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedFeb 18
Description
In the Linux kernel, the following vulnerability has been resolved:
md: suspend array while updating raid_disks via sysfs
In raid1_reshape(), freeze_array() is called before modifying the r1bio
memory pool (conf->r1bio_pool) and conf->raid_disks, and
unfreeze_array() is called after the update is completed.
However, freeze_array() only waits until nr_sync_pending and
(nr_pending - nr_queued) of all buckets reaches zero. When an I/O error
occurs, nr_queued is increased and the corresponding r1…
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:HExploitability: 1.0 | Impact: 4.2
Affected Packages3 packages
▶CVEListV5linux/linuxe2d59925221cd562e07fee38ec8839f7209ae603 — 165d1359f945b72c5f90088f60d48ff46115269e+5
Patches
🔴Vulnerability Details
3GHSA▶
GHSA-hr98-gm7c-926r: In the Linux kernel, the following vulnerability has been resolved:
md: suspend array while updating raid_disks via sysfs
In raid1_reshape(), freeze↗2026-02-18
OSV▶
CVE-2025-71225: In the Linux kernel, the following vulnerability has been resolved: md: suspend array while updating raid_disks via sysfs In raid1_reshape(), freeze_a↗2026-02-18