Race Condition Vulnerability in Linux Kernel Affecting Block Device Management

CVE-2025-38073

What is CVE-2025-38073?

A race condition vulnerability in the Linux kernel can cause a system crash due to a conflict between block size operations and concurrent reading processes. When a block device's block size is modified while another process is attempting to read from it, the kernel may attempt to schedule reads without properly referencing the block device. This can lead to NULL references and crashes. The issue arises especially when large sector size support is enabled, impacting overall system stability. Proper locking mechanisms must be enforced during updates to ensure safe operations across all concurrent processes.

References