Log in Start free

Vulnerability · Published Sep 4, 2025 · Assigned by Linux

CVE-2025-38709loop: Avoid updating block size under exclusive owner

Medium 5.5

In plain English

A medium-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.2%top 95.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: loop: Avoid updating block size under exclusive owner Syzbot came up with a reproducer where a loop device block size is changed underneath a mounted filesystem. This causes a mismatch between the block device block size and the block size stored in the superblock causing confusion in various places such as fs/buffer.c. The particular issue triggered by syzbot was a warning in __getblk_slow() due to requested buffer size not matching block device block size. Fix the problem by getting exclusive hold of the loop device to change its block size. This fails if somebody (such as filesystem) has already an exclusive ownership of the block device and thus prevents modifying the loop device under some exclusive owner which doesn't expect it.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linuxno fix listedDEBIAN-CVE-2025-38709
Debian:13linux6.12.43-1DEBIAN-CVE-2025-38709
Debian:14linux6.16.3-1DEBIAN-CVE-2025-38709
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux6.8.0-106.106USN-8095-1
Ubuntu:24.04:LTSlinux6.8.0-106.106UBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-aws6.8.0-1050.53UBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-aws6.8.0-1050.53USN-8095-1
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1050.53~22.04.1UBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1050.53~22.04.1USN-8095-4
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-azure6.8.0-1051.57UBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-azure6.8.0-1051.57USN-8125-1
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1051.57~22.04.1UBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-azure-fde6.8.0-1058.65UBUNTU-CVE-2025-38709
Ubuntu:25.10linux-azure-fdeno fix listedUBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-azure-fde-6.86.8.0-1058.65~22.04.1UBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-gcp6.8.0-1052.55UBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-gcp6.8.0-1052.55USN-8095-1
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1052.55~22.04.1USN-8095-1
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1052.55~22.04.1UBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-gke6.8.0-1048.53UBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-gke6.8.0-1048.53USN-8095-1
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1035.38UBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1035.38USN-8095-1
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-106.106~22.04.1USN-8095-1
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-106.106~22.04.1UBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-ibm6.8.0-1049.49USN-8095-1
Ubuntu:24.04:LTSlinux-ibm6.8.0-1049.49UBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1049.49~22.04.1USN-8095-1
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1049.49~22.04.1UBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-intelno fix listedUBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-intel-iotgno fix listedUBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-kvmno fix listedUBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-106.106.1UBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-106.106.1USN-8095-1
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-106.106.1~22.04.1USN-8095-1
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-106.106.1~22.04.1UBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1049.52USN-8100-1
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1049.52UBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1049.52~22.04.1USN-8100-1
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1049.52~22.04.1UBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1049.52.1UBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1049.52.1USN-8100-1
Ubuntu:22.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1020.20UBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-nvidia-tegra-igxno fix listedUBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-oracle6.8.0-1047.48UBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-oracle6.8.0-1047.48USN-8095-1
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1047.48~22.04.1USN-8095-1
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1047.48~22.04.1UBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-raspi6.8.0-1050.54UBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-raspi6.8.0-1050.54USN-8095-5
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-106.106~22.04.1UBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2025-38709
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1029.30USN-8261-1
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1028.29UBUNTU-CVE-2025-38709
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2025-38709

Affected products (as reported)

VendorProductVersions
Linux Linux 89e4fdecb51cf5535867026274bc97de9480ade5 – before 46034518cae95db4abfde990c9ca1a075185507289e4fdecb51cf5535867026274bc97de9480ade5 – before 457d2c5e112fd08dc1039b1ae39a83ec1782360d89e4fdecb51cf5535867026274bc97de9480ade5 – before 139a000d20f2f38ce34296feddd641d730fe1c0889e4fdecb51cf5535867026274bc97de9480ade5 – before b928438cc87c0bf7ae078e4b7b6e14261e84c5c589e4fdecb51cf5535867026274bc97de9480ade5 – before 5d67b30aefeb7a949040bbb1b4e3b84c5d29a62489e4fdecb51cf5535867026274bc97de9480ade5 – before 7e49538288e523427beedd26993d446afef1a6fb
Linux Linux 4.14

References