Vulnerability in Linux
CVE-2025-22125
In the Linux kernel, the following vulnerability has been resolved: md/raid1,raid10: don't ignore IO flags If blk-wbt is enabled by default, it's found that raid write performance is quite bad because all IO are throttled by wbt of underlying disks, due to flag REQ_IDLE is ignored. And turns out this behaviour exist since blk-wbt is introduced. Other than REQ_IDLE, other flags should not be ignored as well, for example REQ_META can be set for filesystems, clearing it can cause priority reverse problems; And REQ_NOWAIT should not be cleared as well, because io will wait instead of failing directly in underlying disks. Fix those problems by keep IO flags from master bio. Fises: f51d46d0e7cb ("md: add support for REQ_NOWAIT")
EPSS: 0.002 (7.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Linux — versions 5404bc7a87b9949cf61e0174b21f80e73239ab25, 2.6.19, 0
- Linux Linux_kernel
Public proof-of-concept exploits
References
Frequently asked questions
- What is CVE-2025-22125?
- CVE-2025-22125 is a medium-severity vulnerability in Linux. CVSS score: 5.5/10. Published 2025-04-16.
- How severe is CVE-2025-22125?
- Medium severity. CVSS v3 base score is 5.5 out of 10.
- Is CVE-2025-22125 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.