{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"0fccb6773b1f4f992e435582cf8e050de421b678","status":"affected","version":"9b1ce7f0c6f82e241196febabddba5fab66c8f05","versionType":"git"},{"lessThan":"6ffae5d53f704d300cc73b06b4ea99e4507f7cf1","status":"affected","version":"9b1ce7f0c6f82e241196febabddba5fab66c8f05","versionType":"git"},{"lessThan":"cf625013d8741c01407bbb4a60c111b61b9fa69d","status":"affected","version":"9b1ce7f0c6f82e241196febabddba5fab66c8f05","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"6.10"},{"lessThan":"6.10","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.34","versionType":"semver"},{"lessThanOrEqual":"6.15.*","status":"unaffected","version":"6.15.3","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.16","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2025-38302","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nblock: don't use submit_bio_noacct_nocheck in blk_zone_wplug_bio_work\n\nBios queued up in the zone write plug have already gone through all all\npreparation in the submit_bio path, including the freeze protection.\n\nSubmitting them through submit_bio_noacct_nocheck duplicates the work\nand can can cause deadlocks when freezing a queue with pending bio\nwrite plugs.\n\nGo straight to ->submit_bio or blk_mq_submit_bio to bypass the\nsuperfluous extra freeze protection and checks.","epss":{"date":"2026-11-05","percentile":0.03897,"score":0.00146},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793912551246,"publishedAt":1752133334076,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/0fccb6773b1f4f992e435582cf8e050de421b678"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/6ffae5d53f704d300cc73b06b4ea99e4507f7cf1"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/cf625013d8741c01407bbb4a60c111b61b9fa69d"}],"remediation":[],"revision":"17bfd639ff85088322d4360beb654bf4b75cda4bbf7830bd125d0717fb840605","sources":[{"modifiedAt":1793912551246,"name":"CNA: Linux","retrievedAt":1793913642635,"url":"https://www.cve.org/CVERecord?id=CVE-2025-38302"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793913672295,"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-38302"}],"ssvc":{"assessedAt":1793912004758,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"block: don't use submit_bio_noacct_nocheck in blk_zone_wplug_bio_work","updatedAt":1793913672295}