Linux Kernel Vulnerability in Bitmap Management by Vendor

CVE-2025-21712

Summary

A vulnerability exists in the Linux kernel's bitmap management, specifically related to the function bitmap_get_stats(). This issue arises when the function is called concurrently while the bitmap is destroyed or not fully initialized, leading to potential kernel panics due to dereferencing invalid memory. The problem has been exacerbated by recent changes that facilitated easier triggering of the crash. To mitigate this vulnerability, the bitmap_get_stats() function is now protected by a mutex, ensuring safe access to bitmap data.

References