{"id":"CVE-2025-22124","revision":"67040179e67547c0ac9ec10fd9159f43","records":[{"revision":"67040179e67547c0ac9ec10fd9159f43","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2025-22124","aliases":[],"title":"md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmd/md-bitmap: fix wrong bitmap_limit for clustermd when write sb\n\nIn clustermd, separate write-intent-bitmaps are used for each cluster\nnode:\n\n0                    4k                     8k                    12k\n-------------------------------------------------------------------\n| idle                | md super            | bm super [0] + bits |\n| bm bits[0, contd]   | bm super[1] + bits  | bm bits[1, contd]   |\n| bm super[2] + bits  | bm bits [2, contd]  | bm super[3] + bits  |\n| bm bits [3, contd]  |                     |                     |\n\nSo in node 1, pg_index in __write_sb_page() could equal to\nbitmap->storage.file_pages. Then bitmap_limit will be calculated to\n0. md_super_write() will be called with 0 size.\nThat means the first 4k sb area of node 1 will never be updated\nthrough filemap_write_page().\nThis bug causes hang of mdadm/clustermd_tests/01r1_Grow_resize.\n\nHere use (pg_index % bitmap->storage.file_pages) to make calculation\nof bitmap_limit correct.","state":0,"publishedAt":"2025-04-16T14:13:08.134+00:00","modifiedAt":"2026-10-15T21:51:58.133+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/md/md-bitmap.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"655cc01889fa9b65441922565cddee64af49e6d6\",\n                            \"lessThan\": \"5eaf57fdfa37c869e61e9908e03edd707f9145b8\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"ab99a87542f194f28e2364a42afbf9fb48b1c724\",\n                            \"lessThan\": \"60196f92bbc7901eb5cfa5d456651b87ea50a4a3\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"ab99a87542f194f28e2364a42afbf9fb48b1c724\",\n                            \"lessThan\": \"bc3a9788961631359527763d7e1fcf26554c7cb1\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"ab99a87542f194f28e2364a42afbf9fb48b1c724\",\n                            \"lessThan\": \"6130825f34d41718c98a9b1504a79a23e379701e\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"5600d6013c634c2b6b6c6c55c8ecb50c3a6211f2\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"6.6.44\",\n                            \"lessThan\": \"6.6.157\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.10.3\",\n                            \"lessThan\": \"6.11\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/md/md-bitmap.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.11\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.11\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.157\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.46\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.14.2\",\n                            \"lessThanOrEqual\": \"6.14.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.15\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7.8,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/5eaf57fdfa37c869e61e9908e03edd707f9145b8","https://git.kernel.org/stable/c/60196f92bbc7901eb5cfa5d456651b87ea50a4a3","https://git.kernel.org/stable/c/bc3a9788961631359527763d7e1fcf26554c7cb1","https://git.kernel.org/stable/c/6130825f34d41718c98a9b1504a79a23e379701e"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-22124","license":"CVE Program Terms of Use","key":"cve-program:CVE-2025-22124","identifiers":["CVE-2025-22124"]},"retained":false,"historicalAffected":[]}],"coverage":[]}