Zoned Device Management Issue in Linux Kernel Affecting Multiple Platforms

CVE-2025-38140

What is CVE-2025-38140?

The vulnerability in the Linux kernel pertains to zoned device management where the dm_revalidate_zones() function inadequately processes devices with existing zone write plug resources. This flaw can lead to mismatched zoned settings and potential errors when accessing disk zones, impacting system stability and data integrity. Instead of allowing arbitrary changes, the solution restricts table reloads that could modify the zoned settings for devices with allocated zone plug resources, ensuring that only compatible configurations are utilized.

References