Linux Kernel Vulnerability in BFQ I/O Scheduler Component

CVE-2025-21631

Summary

A vulnerability in the Linux kernel related to the BFQ I/O scheduler has been identified, which can lead to a use-after-free condition. The issue arises during the initialization of requests, where memory that was previously freed is accessed. Specifically, in the function bfq_init_rq, a slab-use-after-free can occur when a request object is not properly managed. An attacker exploiting this vulnerability could cause system instability, potentially leading to a denial-of-service or other unforeseen behaviors.

References